PT-2020-16862 · Apple · Apple Macos+4

Published 2020-11-12 · Updated 2023-01-09 · CVE-2020-27931

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 14.0 Apple iPadOS versions prior to 14.0 Apple macOS versions prior to 11.1 Apple macOS versions prior to Security Update 2020-001 Catalina Apple macOS versions prior to Security Update 2020-007 Mojave Apple watchOS versions prior to 7.0 Apple tvOS versions prior to 14.0

Description A memory corruption issue existed in the processing of font files, which may lead to arbitrary code execution. This issue was addressed with improved input validation.

Recommendations For Apple iOS versions prior to 14.0, update to iOS 14.0 or later. For Apple iPadOS versions prior to 14.0, update to iPadOS 14.0 or later. For Apple macOS versions prior to 11.1, update to macOS Big Sur 11.1 or later, or apply Security Update 2020-001 Catalina, or apply Security Update 2020-007 Mojave. For Apple watchOS versions prior to 7.0, update to watchOS 7.0 or later. For Apple tvOS versions prior to 14.0, update to tvOS 14.0 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-27931

ZDI-20-1405

Affected Products

Apple Macos

Ios

Ipados

Tvos

Watchos

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2020-27931 · Security Note
• https://support.apple.com/en-us/HT211931 · Vendor Advisory
• https://support.apple.com/en-us/HT211843 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-20-1405 · Security Note
• https://osv.dev/vulnerability/CVE-2020-27931 · Vendor Advisory
• https://support.apple.com/en-us/HT212011 · Vendor Advisory
• https://support.apple.com/en-us/HT211844 · Vendor Advisory
• https://support.apple.com/en-us/HT211850 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27931 · Note
• https://support.apple.com/en-us/102846 · Note
• https://support.apple.com/en-us/103052 · Note