Skip to content
OpenAdvisories
Unscored CVE-2020-3880 EUVD-2020-25145GHSA-w7gc-5xjf-f39v

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvO…

Published Oct 27, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 6.1.2, iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, macOS Catalina 10.15.3, Security Update 2020-001 Mojave, Security Update 2020-001 High Sierra. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 13.3 13.3
Apple macOS unspecified – < 10.15, unspecified – < 13.3, unspecified – < 6.1 10.15

References