This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierra. A malicious application may be able to overwrite arbitrary files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.13 (including) | 10.13.6 (excluding) |
| Mac_os_x | Apple | 10.14 (including) | 10.14.6 (excluding) |
| Mac_os_x | Apple | 10.15 (including) | 10.15.4 (excluding) |
| Mac_os_x | Apple | 10.13.6 (including) | 10.13.6 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2018-002 (including) | 10.13.6-security_update_2018-002 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2018-003 (including) | 10.13.6-security_update_2018-003 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-001 (including) | 10.13.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-002 (including) | 10.13.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-003 (including) | 10.13.6-security_update_2019-003 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-004 (including) | 10.13.6-security_update_2019-004 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-005 (including) | 10.13.6-security_update_2019-005 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-006 (including) | 10.13.6-security_update_2019-006 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2019-007 (including) | 10.13.6-security_update_2019-007 (including) |
| Mac_os_x | Apple | 10.13.6-security_update_2020-001 (including) | 10.13.6-security_update_2020-001 (including) |
| Mac_os_x | Apple | 10.14.6 (including) | 10.14.6 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-001 (including) | 10.14.6-security_update_2019-001 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2019-002 (including) | 10.14.6-security_update_2019-002 (including) |
| Mac_os_x | Apple | 10.14.6-security_update_2020-001 (including) | 10.14.6-security_update_2020-001 (including) |