← CVE Intelligence

CVE-2020-9910

Apple / iOS PUBLISHED

Description (CNA)

Multiple issues were addressed with improved logic. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, Safari 13.1.2, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected (CNA)

Vendor / productVersions
Apple / iOSaffected unspecified before iOS 13.6 and iPadOS 13.6
Apple / tvOSaffected unspecified before tvOS 13.4.8
Apple / watchOSaffected unspecified before watchOS 6.2.8
Apple / Safariaffected unspecified before Safari 13.1.2
Apple / iTunes for Windowsaffected unspecified before iTunes 12.10.8 for Windows
Apple / iCloud for Windowsaffected unspecified before iCloud for Windows 11.3
Apple / iCloud for Windows (Legacy)affected unspecified before iCloud for Windows 7.20

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.