Published: 16/10/2020 Updated: 09/01/2023

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 437

Vector: AV:L/AC:L/Au:N/C:C/I:N/A:N

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple ipados

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 140 and iPadOS 140 <!--X-Subject-Header-E ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2020-09-16-1 iOS 140 and iPadOS 140   From: Apple Prod ...

Learning how to use IOSurfaceAccelerator

Learning IOSurfaceAccelerator's comm output API Currently crashes on macOS 13 beta 22A5266r with a (non-exploitable) null pointer dereference with ASE (Apple Scaling Engine???) enabled, since I don't know how to use ASEProcessing to generate a set of valid ASE inbound params This calls the userspace IOSurfaceAccelerator framework instead of calling the userclient di

iOS Security Awesome В данном репозитории собранны материалы по безопасности iOS-приложений, различные статьи, исследования, инструменты анализа и полезные библиотеки/инструменты для обеспечения безопасности прилож

kernel exploit for Apple iOS 13.X

oob_events The exploit uses two distinct vulnerabilities which I independently discovered and reported to Apple, CVE-2020-27905 which is a race condition leads to OOB read/write via arbitrary 32-bit index,and CVE-2020-9964 which is a kernel information leak bug

Android Security Awesome В данном репозитории собранны материалы по безопасности Android-приложений, различные статьи, исследования, инструменты анализа и полезные библиотеки/инструменты для обеспечения безопасности п�

CWE-665 https://support.apple.com/HT211850 http://seclists.org/fulldisclosure/2020/Nov/20 https://nvd.nist.gov https://github.com/zhuowei/LearningIOSurfaceAccelerator http://seclists.org/fulldisclosure/2020/Nov/20

CVE-2020-9964

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect