4.3

CVE-2020-9894

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iCloud SwPlatformwindows Version < 7.20
Apple ≫ iCloud SwPlatformwindows Version >= 11.0 < 11.3
Apple ≫ iTunes SwPlatformwindows Version < 12.10.8
Apple ≫ Safari Version < 13.1.2
Apple ≫ iPadOS Version < 13.6
Apple ≫ iPhone OS Version < 13.6
Apple ≫ tvOS Version < 13.4.8
Apple ≫ watchOS Version < 6.2.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.57% 0.832
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/HT211288
Vendor Advisory
https://support.apple.com/HT211290
Vendor Advisory
https://support.apple.com/HT211291
Vendor Advisory
https://support.apple.com/HT211292
Vendor Advisory
https://support.apple.com/HT211293
Vendor Advisory
https://support.apple.com/HT211294
Vendor Advisory
https://support.apple.com/HT211295
Vendor Advisory