PT-2020-16872 · Apple · Macos Mojave+3

Zhuo Liang · Published 2020-11-12 · Updated 2021-04-07 · CVE-2020-27945

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.2 Security Update 2021-001 Catalina Security Update 2021-001 Mojave macOS Big Sur version 11.0.1

Description An integer overflow issue was addressed through improved input validation. The issue may lead to arbitrary code execution when processing maliciously crafted web content.

Recommendations For macOS Big Sur versions prior to 11.2, update to macOS Big Sur 11.2 or later. For Security Update 2021-001 Catalina, apply Security Update 2021-001 or later. For Security Update 2021-001 Mojave, apply Security Update 2021-001 or later. For macOS Big Sur version 11.0.1, update to macOS Big Sur 11.2 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2020-27945

Affected Products

Apple Macos

Macos Big Sur

Macos Catalina

Macos Mojave

References · 7

• https://osv.dev/vulnerability/CVE-2020-27945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27945 · Security Note
• https://support.apple.com/en-us/HT212147 · Vendor Advisory
• https://support.apple.com/en-us/HT211931 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27945 · Note
• https://support.apple.com/en-us/103124 · Note
• https://support.apple.com/en-us/102846 · Note