CVE-2020-9999

published 2020-12-08

CVE-2020-9999: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
apple	icloud	< 11.5.0	11.5.0
apple	ipados	< 14.0	14.0
apple	iphone_os	< 14.0	14.0
apple	itunes	< 12.10.9	12.10.9
apple	itunes_12.10.9_for_windows	—	—
apple	mac_os_x	< 11.0.1	11.0.1
apple	macos	>= unspecified < 11.0	11.0
apple	macos	>= unspecified < 12.10	12.10
apple	tvos	< 14.0	14.0
apple	tvos	—	—
apple	watchos	< 7.0	7.0
apple	watchos	—	—

CWE-787