PT-2020-16861 · Apple · Ios

Jam_Penn · Published 2020-12-08 · Updated 2020-12-09 · CVE-2020-27929

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.4.9

Description A logic issue existed in the handling of Group FaceTime calls, which was addressed with improved state management. This issue allowed a user to potentially send video in Group FaceTime calls without knowing they had done so.

Recommendations For iOS versions prior to 12.4.9, update to iOS 12.4.9 to resolve the issue. As a temporary workaround, consider disabling Group FaceTime calls until the update is applied.

Fix

Related Identifiers

CVE-2020-27929

Affected Products

Ios

References · 5

• https://osv.dev/vulnerability/CVE-2020-27929 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27929 · Security Note
• https://support.apple.com/en-us/HT211940 · Vendor Advisory
• https://t.me/cvenotify/6775 · Telegram Post
• https://t.me/cvenotify/6824 · Telegram Post