PT-2020-16870 · Apple · Macos Mojave+7
Mateusz Jurczyk
·
Published
2020-12-14
·
Updated
2021-04-07
·
CVE-2020-27943
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 14.3
Apple iPadOS versions prior to 14.3
Apple tvOS versions prior to 14.3
Apple macOS Big Sur versions prior to 11.1
Apple macOS Catalina versions prior to Security Update 2020-001
Apple macOS Mojave versions prior to Security Update 2020-007
Apple watchOS versions prior to 7.2
Description
A memory corruption issue existed in the processing of font files, which was addressed with improved input validation. Processing a maliciously crafted font file may lead to arbitrary code execution.
Recommendations
For Apple iOS versions prior to 14.3, update to iOS 14.3 or later.
For Apple iPadOS versions prior to 14.3, update to iPadOS 14.3 or later.
For Apple tvOS versions prior to 14.3, update to tvOS 14.3 or later.
For Apple macOS Big Sur versions prior to 11.1, update to macOS Big Sur 11.1 or later.
For Apple macOS Catalina versions prior to Security Update 2020-001, apply Security Update 2020-001 or later.
For Apple macOS Mojave versions prior to Security Update 2020-007, apply Security Update 2020-007 or later.
For Apple watchOS versions prior to 7.2, update to watchOS 7.2 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apple Macos
Ios
Ipados
Macos Big Sur
Macos Catalina
Macos Mojave
Tvos
Watchos