Description
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | Security Update - Catalina | unspecified – < 2021 | 2021 |
| Apple | iOS and iPadOS | unspecified – < 15 | 15 |
| Apple | tvOS | unspecified – < 15 | 15 |
| Apple | iTunes for Windows | unspecified – < 12.12 | 12.12 |
| Apple | watchOS | unspecified – < 8 | 8 |
References
- https://support.apple.com/kb/HT212804
- https://support.apple.com/en-us/HT212805
- https://support.apple.com/en-us/HT212814
- https://support.apple.com/en-us/HT212819
- https://support.apple.com/en-us/HT212815
- https://support.apple.com/en-us/HT212817
- 20211027 APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8 mailing-list
- 20211027 APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15 mailing-list
- 20211027 APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 mailing-list
- https://support.apple.com/kb/HT212953