CVE-2020-9981
published 2020-12-08CVE-2020-9981: A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9…
PriorityP341high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.35%
68.4th percentile
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | icloud | < 11.5 | 11.5 |
| apple | ipados | < 14.0 | 14.0 |
| apple | iphone_os | < 14.0 | 14.0 |
| apple | itunes | < 12.10.9 | 12.10.9 |
| apple | itunes_12.10.9_for_windows | — | — |
| apple | mac_os_x | < 10.15.7 | 10.15.7 |
| apple | macos | >= unspecified < 10.15 | 10.15 |
| apple | macos | >= unspecified < 14.0 | 14.0 |
| apple | macos | >= unspecified < 11.5 | 11.5 |
| apple | macos | >= unspecified < 12.10 | 12.10 |
| apple | tvos | < 14.0 | 14.0 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < 14.0 | 14.0 |
| apple | watchos | < 7.0 | 7.0 |
| apple | watchos | — | — |
| apple | watchos | >= unspecified < 7.0 | 7.0 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2020-9981: tvOS 14.0
vendor_apple·2020-09-16·CVSS 7.8
CVE-2020-9981 [HIGH] CVE-2020-9981: tvOS 14.0
Apple Security Update: About the security content of tvOS 14.0
Product: tvOS
Version: 14.0
CVE: CVE-2020-9981
Component: Keyboard
Impact: A malicious application may be able to leak sensitive user information
Description: A logic issue was addressed with improved state management.
Apple
CVE-2020-9981: iTunes 12.10.9 for Windows
vendor_apple·2020-09-16·CVSS 7.8
CVE-2020-9981 [HIGH] CVE-2020-9981: iTunes 12.10.9 for Windows
Apple Security Update: About the security content of iTunes 12.10.9 for Windows
Product: iTunes 12.10.9 for Windows
CVE: CVE-2020-9981
Component: ImageIO
Impact: Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents
Description: An out-of-bounds read was addressed with improved input validation.
Apple
CVE-2020-9981: watchOS 7.0
vendor_apple·2020-09-16·CVSS 7.8
CVE-2020-9981 [HIGH] CVE-2020-9981: watchOS 7.0
Apple Security Update: About the security content of watchOS 7.0
Product: watchOS
Version: 7.0
CVE: CVE-2020-9981
Component: Keyboard
Impact: A malicious application may be able to leak sensitive user information
Description: A logic issue was addressed with improved state management.
GHSA
GHSA-6c7m-3c93-428j: A use after free issue was addressed with improved memory management
ghsa_unreviewed·2022-05-24
CVE-2020-9981 [HIGH] CWE-416 GHSA-6c7m-3c93-428j: A use after free issue was addressed with improved memory management
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted file may lead to arbitrary code execution.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://support.apple.com/en-us/HT211843https://support.apple.com/en-us/HT211844https://support.apple.com/en-us/HT211849https://support.apple.com/en-us/HT211850https://support.apple.com/en-us/HT211935https://support.apple.com/en-us/HT211952https://support.apple.com/en-us/HT211843https://support.apple.com/en-us/HT211844https://support.apple.com/en-us/HT211849https://support.apple.com/en-us/HT211850https://support.apple.com/en-us/HT211935https://support.apple.com/en-us/HT211952
2020-12-08
Published