The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.
During installation, installed file permissions are set to allow anyone to modify those files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ipados | Apple | * | 13.3.1 (excluding) |
Iphone_os | Apple | * | 13.3.1 (excluding) |
Mac_os_x | Apple | * | 10.14.6 (excluding) |
Mac_os_x | Apple | 10.15 (including) | 10.15.3 (excluding) |
Mac_os_x | Apple | 10.14.6 (including) | 10.14.6 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2019-001 (including) | 10.14.6-security_update_2019-001 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2019-002 (including) | 10.14.6-security_update_2019-002 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-001 (including) | 10.14.6-security_update_2020-001 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-002 (including) | 10.14.6-security_update_2020-002 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-003 (including) | 10.14.6-security_update_2020-003 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-004 (including) | 10.14.6-security_update_2020-004 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-005 (including) | 10.14.6-security_update_2020-005 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-006 (including) | 10.14.6-security_update_2020-006 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2020-007 (including) | 10.14.6-security_update_2020-007 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2021-001 (including) | 10.14.6-security_update_2021-001 (including) |
Mac_os_x | Apple | 10.14.6-security_update_2021-002 (including) | 10.14.6-security_update_2021-002 (including) |
Mac_os_x | Apple | 10.14.6-supplemental_update (including) | 10.14.6-supplemental_update (including) |
Mac_os_x | Apple | 10.14.6-supplemental_update_2 (including) | 10.14.6-supplemental_update_2 (including) |
Tvos | Apple | * | 13.3.1 (excluding) |
Watchos | Apple | * | 6.1.2 (excluding) |