Vulnerability Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to read restricted memory.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 14.0 |
| Apple | Iphone Os | < 14.0 |
| Apple | Mac Os X | < 11.1 |
| Apple | Tvos | < 14.0 |
| Apple | Watchos | < 7.0 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2020/Dec/26Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT211843Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211844Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211850Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211931Release NotesVendor Advisory
- https://support.apple.com/kb/HT212011Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/26Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32Mailing ListThird Party Advisory
- https://support.apple.com/en-us/HT211843Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211844Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211850Release NotesVendor Advisory
- https://support.apple.com/en-us/HT211931Release NotesVendor Advisory
- https://support.apple.com/kb/HT212011Vendor Advisory
FAQ
What is CVE-2020-9944?
CVE-2020-9944 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to read res...
How severe is CVE-2020-9944?
CVE-2020-9944 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9944?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.