CVE Vulnerabilities

CVE-2020-9910

Published: Oct 16, 2020 | Modified: Nov 21, 2024
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected Software

NameVendorStart VersionEnd Version
IcloudApple*7.20 (excluding)
IcloudApple11.0 (including)11.3 (excluding)
ItunesApple*12.10.8 (excluding)
SafariApple*13.1.2 (excluding)
IpadosApple*13.6 (excluding)
Iphone_osApple*13.6 (excluding)
TvosApple*13.4.8 (excluding)
WatchosApple*6.2.8 (excluding)

References