Skip to content
OpenAdvisories
Unscored CVE-2020-9920 EUVD-2020-30699GHSA-r6fc-jj24-8qhw

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watc…

Published Oct 22, 2020 · Updated Aug 4, 2024 · Assigned by apple

Vendor: Apple Product: iOS Product: macOS Product: watchOS Platform: iOS Platform: macOS

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicious mail server may overwrite arbitrary mail files.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 13.6 and iPadOS 13.6 iOS 13.6 and iPadOS 13.6
Apple macOS unspecified – < macOS Catalina 10.15.6 macOS Catalina 10.15.6
Apple watchOS unspecified – < watchOS 6.2.8 watchOS 6.2.8

References