CVE-2020-9985

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@apple.com

Published

2020-10-22

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Ios (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Mac Os X (Apple)
• Macos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/kb/HT211288
• https://support.apple.com/kb/HT211289
• https://support.apple.com/kb/HT211291