PT-2020-17744 · Apple · Macos High Sierra+2

Luyi Xing + 2 · Published 2020-10-27 · Updated 2020-11-03 · CVE-2020-3851

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Catalina versions prior to 10.15.4 macOS Mojave versions prior to Security Update 2020-002 macOS High Sierra versions prior to Security Update 2020-002

Description A use after free issue was addressed with improved memory management, which may allow an application to gain elevated privileges.

Recommendations For macOS Catalina versions prior to 10.15.4, update to macOS Catalina 10.15.4 or later. For macOS Mojave versions prior to Security Update 2020-002, apply Security Update 2020-002 or later. For macOS High Sierra versions prior to Security Update 2020-002, apply Security Update 2020-002 or later.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-3851

Affected Products

Macos Catalina

Macos High Sierra

Macos Mojave

References · 4

• https://support.apple.com/en-us/HT210919 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3851 · Vendor Advisory
• https://support.apple.com/en-us/HT211100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3851 · Security Note