Published: 27/10/2020 Updated: 25/05/2022

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple ipados
apple mac os x
apple mac os x 10.14.6
apple mac os x 10.13.6

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2020-09-24-1 macOS Catalina 10156 Supplemental Update, Security Update 2020-005 High Sierra, Security Update ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 140 and iPadOS 140 <!--X-Subject-Header-E ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2020-09-16-1 iOS 140 and iPadOS 140   From: Apple Prod ...

CWE-125 https://support.apple.com/en-us/HT211849 https://support.apple.com/en-us/HT211850 https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1104 http://seclists.org/fulldisclosure/2020/Nov/21 http://seclists.org/fulldisclosure/2020/Nov/20 https://nvd.nist.gov http://seclists.org/fulldisclosure/2020/Sep/47

CVE-2020-9973

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect