PT-2020-11859 · Apple · Apple Macos

Luyi Xing + 2 · Published 2020-11-12 · Updated 2021-04-13 · CVE-2020-10015

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 11.1 Apple macOS versions prior to Security Update 2020-001 Catalina Apple macOS versions prior to Security Update 2020-007 Mojave Apple macOS version 11.0.1

Description An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges.

Recommendations For macOS Big Sur, update to version 11.1 or later. For macOS Catalina, apply Security Update 2020-001 or later. For macOS Mojave, apply Security Update 2020-007 or later. For macOS Big Sur 11.0.1, update to a newer version that includes the security fix.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-10015

ZDI-20-1408

ZDI-20-1409

ZDI-21-069

Affected Products

Apple Macos

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2020-10015 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-1409 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-20-1408 · Security Note
• https://support.apple.com/en-us/HT211931 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10015 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-069 · Security Note
• https://support.apple.com/en-us/HT212011 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10015 · Note
• https://support.apple.com/en-us/102846 · Note
• https://t.me/cvenotify/12855 · Telegram Post
• https://support.apple.com/en-us/103052 · Note