Vulnerability Description
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to determine another application's memory layout.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 13.5 |
| Apple | Iphone Os | < 13.5 |
| Apple | Mac Os X | < 10.15.5 |
| Apple | Tvos | < 13.4.5 |
| Apple | Watchos | < 6.2.5 |
References
- https://support.apple.com/HT211168Release NotesVendor Advisory
- https://support.apple.com/HT211170Release NotesVendor Advisory
- https://support.apple.com/HT211171Release NotesVendor Advisory
- https://support.apple.com/HT211175Release NotesVendor Advisory
- https://support.apple.com/HT211168Release NotesVendor Advisory
- https://support.apple.com/HT211170Release NotesVendor Advisory
- https://support.apple.com/HT211171Release NotesVendor Advisory
- https://support.apple.com/HT211175Release NotesVendor Advisory
FAQ
What is CVE-2020-9797?
CVE-2020-9797 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious applicat...
How severe is CVE-2020-9797?
CVE-2020-9797 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9797?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.