Skip to content
OpenAdvisories
Unscored CVE-2020-9910 EUVD-2020-30689GHSA-mhx4-5j7f-6rxc

Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.…

Published Oct 16, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 13.6 and iPadOS 13.6 iOS 13.6 and iPadOS 13.6
Apple tvOS unspecified – < tvOS 13.4.8 tvOS 13.4.8
Apple watchOS unspecified – < watchOS 6.2.8 watchOS 6.2.8
Apple Safari unspecified – < Safari 13.1.2 Safari 13.1.2
Apple iTunes for Windows unspecified – < iTunes 12.10.8 for Windows iTunes 12.10.8 for Windows
Apple iCloud for Windows unspecified – < iCloud for Windows 11.3 iCloud for Windows 11.3
Apple iCloud for Windows (Legacy) unspecified – < iCloud for Windows 7.20 iCloud for Windows 7.20

References