A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT211850 | Vendor Advisory |
https://support.apple.com/kb/HT212003 | Vendor Advisory |
https://support.apple.com/kb/HT212005 | Vendor Advisory |
https://support.apple.com/kb/HT212011 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Sep 2021, 14:22
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
22 Mar 2021, 20:37
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://support.apple.com/kb/HT212003 - Vendor Advisory | |
References | (CONFIRM) https://support.apple.com/kb/HT212005 - Vendor Advisory | |
CPE | cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
17 Mar 2021, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Feb 2021, 15:47
Type | Values Removed | Values Added |
---|---|---|
References | (CONFIRM) https://support.apple.com/kb/HT212011 - Vendor Advisory | |
CPE | cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:* |
02 Feb 2021, 03:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-12-08 20:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-9972
Mitre link : CVE-2020-9972
CVE.ORG link : CVE-2020-9972
JSON object : View
Products Affected
apple
- macos
- iphone_os
- tvos
- ipad_os
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')