CVE-2020-9852

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@apple.com

Published

2020-06-09

Last modified

2024-08-04

Weaknesses

CWE-190

Affected products

• Ios (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Mac Os X (Apple)
• Macos (Apple)
• Tvos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/HT211168
• https://support.apple.com/HT211170
• https://support.apple.com/HT211171
• https://support.apple.com/HT211175