Vulnerabilities > CVE-2020-29616 - Out-of-bounds Write vulnerability in Apple mac OS X and Macos

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

apple

CWE-787

NVD

Published: 2021-04-02

Updated: 2022-06-28

Summary

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple MAC OS X 10.15 Apple MAC OS X 10.15.1 Apple MAC OS X 10.15.4 Apple MAC OS X 10.15.5 Apple MAC OS X 10.15.6 Apple MAC OS X 10.14 Apple MAC OS X 10.14.0 Apple MAC OS X 10.14.1 Apple MAC OS X 10.14.2 Apple MAC OS X 10.14.3 Apple MAC OS X 10.14.4 Apple MAC OS X 10.14.5 Apple MAC OS X 10.14.6 Apple MAC OS X 10.15.7 Apple Macos 11.0 Apple Macos 11.0.1 Apple Macos 11.1	30

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://support.apple.com/en-us/HT212011