VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 2, 2021· Updated Jun 17, 2026

CVE-2020-9956

CVE-2020-9956

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

29
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <14.0.
    • (no CPE)range: 14.0
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <14.0
  • Apple Inc./Mac OS X14 versions
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: >=10.14,<10.14.6
    • cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
  • Apple Inc./macOS3 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=11.0,<11.1.0
    • (no CPE)range: Big Sur 11.0.1, Big Sur 11.1
    • (no CPE)range: unspecified
  • Apple Inc./tvOS3 versions
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <14.0
    • (no CPE)range: 14.0
    • (no CPE)range: unspecified
  • Apple Inc./watchOS3 versions
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <7.0
    • (no CPE)range: 7.0
    • (no CPE)range: unspecified
  • Apple Inc./Security Updatellm-fuzzy
    Range: 2020-001 Catalina, 2020-007 Mojave
  • Apple Inc./iOSllm-fuzzy
    Range: 14.0
  • Apple Inc./iOS and iPadOScpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.