Vulnerability Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Icloud | < 7.21 |
| Apple | Itunes | < 12.10.9 |
| Apple | Ipados | < 14.0 |
| Apple | Iphone Os | < 14.0 |
| Apple | Macos | < 10.15.7 |
| Apple | Tvos | < 14.0 |
| Apple | Watchos | < 7.0 |
Related Weaknesses (CWE)
References
- https://support.apple.com/en-us/HT211843Vendor Advisory
- https://support.apple.com/en-us/HT211844Vendor Advisory
- https://support.apple.com/en-us/HT211846Vendor Advisory
- https://support.apple.com/en-us/HT211847Vendor Advisory
- https://support.apple.com/en-us/HT211850Vendor Advisory
- https://support.apple.com/en-us/HT211952Vendor Advisory
- https://support.apple.com/en-us/HT211843Vendor Advisory
- https://support.apple.com/en-us/HT211844Vendor Advisory
- https://support.apple.com/en-us/HT211846Vendor Advisory
- https://support.apple.com/en-us/HT211847Vendor Advisory
- https://support.apple.com/en-us/HT211850Vendor Advisory
- https://support.apple.com/en-us/HT211952Vendor Advisory
FAQ
What is CVE-2020-36521?
CVE-2020-36521 is a vulnerability with a CVSS score of 7.1 (HIGH). An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes fo...
How severe is CVE-2020-36521?
CVE-2020-36521 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-36521?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Icloud, Apple Itunes, Apple Ipados, Apple Iphone Os, Apple Macos.