CVE-2020-29619
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - product-security@apple.com
- Published
- 2021-04-02
- Last modified
- 2024-08-04
- Weaknesses
- CWE-125
Affected products
- Icloud (Apple)
- Ios And Ipados (Apple)
- Ipados (Apple)
- Iphone Os (Apple)
- Mac Os X (Apple)
- Macos (Apple)
- Tvos (Apple)
- Watchos (Apple)
References
- https://support.apple.com/en-us/HT212003
- https://support.apple.com/en-us/HT212005
- https://support.apple.com/en-us/HT212009
- https://support.apple.com/en-us/HT212011
- https://support.apple.com/en-us/HT212145
