9.8

CVE-2020-9895

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iCloud SwPlatform windows Version < 7.20
Apple ≫ iCloud SwPlatform windows Version >= 11.0 < 11.3
Apple ≫ iTunes SwPlatform windows Version < 12.10.8
Apple ≫ Safari Version < 13.1.2
Apple ≫ iPadOS Version < 13.6
Apple ≫ iPhone OS Version < 13.6
Apple ≫ tvOS Version < 13.4.8
Apple ≫ watchOS Version < 6.2.8
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.49% 0.907
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://support.apple.com/HT211288
Vendor Advisory
https://support.apple.com/HT211290
Vendor Advisory
https://support.apple.com/HT211291
Vendor Advisory
https://support.apple.com/HT211292
Vendor Advisory
https://support.apple.com/HT211293
Vendor Advisory
https://support.apple.com/HT211294
Vendor Advisory
https://support.apple.com/HT211295
Vendor Advisory