PT-2020-6679 · Apple · Ios+2

08Tc3Wbb · Published 2020-07-24 · Updated 2025-10-23 · CVE-2020-9907

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8

Description The issue is related to a memory corruption problem in the AVEVideoEncoder component, which can lead to a buffer overflow. This can potentially allow an attacker to execute arbitrary code with kernel privileges. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For iOS versions prior to 13.6, update to iOS 13.6 or later. For iPadOS versions prior to 13.6, update to iPadOS 13.6 or later. For tvOS versions prior to 13.4.8, update to tvOS 13.4.8 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-04129

CVE-2020-9907

Affected Products

Ios

Ipados

Tvos

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2020-9907 · Security Note
• https://support.apple.com/HT211290 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04129 · Security Note
• https://support.apple.com/HT211288 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-9907 · Vendor Advisory
• https://t.me/true_secator/3099 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9907 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cvenotify/112792 · Telegram Post
• https://t.me/cveNotify/140054 · Telegram Post
• https://t.me/aptreports/1121 · Telegram Post
• https://t.me/echeloneyes/402 · Telegram Post