Vulnerabilities > CVE-2020-9887 - Out-of-bounds Write vulnerability in Apple mac OS X

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

apple

CWE-787

NVD

Published: 2020-10-22

Updated: 2021-07-21

Summary

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. Viewing a maliciously crafted JPEG file may lead to arbitrary code execution.

Vulnerable Configurations

Part	Description	Count
OS	Apple Apple MAC OS X 10.13.6 Apple MAC OS X 10.14 Apple MAC OS X 10.14.0 Apple MAC OS X 10.14.1 Apple MAC OS X 10.14.2 Apple MAC OS X 10.14.3 Apple MAC OS X 10.14.4 Apple MAC OS X 10.14.5 Apple MAC OS X 10.14.6 Apple MAC OS X 10.15 Apple MAC OS X 10.15.1 Apple MAC OS X 10.15.2 Apple MAC OS X 10.15.3 Apple MAC OS X 10.15.4 Apple MAC OS X 10.15.5	51

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://support.apple.com/kb/HT211289