Unrated severityNVD Advisory· Published Oct 22, 2020· Updated Aug 4, 2024

CVE-2020-9994

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to overwrite arbitrary files.

Affected products

Apple Inc./tvOSv5
Range: unspecified
Apple Inc./macOSv5
Range: unspecified
Apple Inc./watchOSv5
Range: unspecified
Apple Inc./iOScpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.apple.com/kb/HT211168mitrex_refsource_MISC
support.apple.com/kb/HT211170mitrex_refsource_MISC
support.apple.com/kb/HT211171mitrex_refsource_MISC
support.apple.com/kb/HT211175mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000