VDB

CVE-2020-9919

CVE-2020-9919 PUBLISHED CVSS 7.800000190734863 HIGH

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.

EPSS 1.51% · 72.0th percentile

Risk Scores

CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
1.51%
72.0th percentile

Affected Products

VendorProductVersions
appleitunes0
AppleiOSunspecified
appletvos0
AppletvOSunspecified
applemac_os_x0
appleiphone_os0
AppleiCloud for Windows (Legacy)unspecified
AppleiTunes for Windowsunspecified
applewatchos0
AppleiCloud for Windows*
appleicloud11.0, 0
ApplewatchOS*
appleipados0
ApplemacOSunspecified

Timeline

  • Oct 22, 2020 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 2, 2022 EPSS Score
  • Jul 3, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Jan 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›