Skip to content
OpenAdvisories
Unscored CVE-2020-9870 EUVD-2020-30649GHSA-899c-g9fr-8ccx

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8.…

Published Oct 16, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 13.6 and iPadOS 13.6 iOS 13.6 and iPadOS 13.6
Apple macOS unspecified – < macOS Catalina 10.15.6 macOS Catalina 10.15.6
Apple tvOS unspecified – < tvOS 13.4.8 tvOS 13.4.8

References