7.8

CVE-2020-3826

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing a maliciously crafted image may lead to arbitrary code execution.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iCloud SwPlatformwindows Version < 11.0
Apple ≫ iTunes SwPlatformwindows Version < 12.10.4
Apple ≫ iPadOS Version < 13.3.1
Apple ≫ iPhone OS Version < 13.3.1
Apple ≫ macOS X Version < 10.15.3
Apple ≫ tvOS Version < 13.3.1
Apple ≫ watchOS Version < 6.1.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.5% 0.65
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/HT210947
Vendor Advisory
Release Notes
https://support.apple.com/HT210948
Vendor Advisory
Release Notes