{"id":"CVE-2020-9876","state":"PUBLISHED","title":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTune","description":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.","publishedAt":"2020-10-22T17:58:31.000Z","updatedAt":"2024-08-04T10:43:05.452Z","severity":null,"assigner":"apple","products":["Apple iOS","Apple macOS","Apple tvOS","Apple watchOS","Apple iTunes for Windows","Apple iCloud for Windows","Apple iCloud for Windows (Legacy)"],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"iOS 13.6 and iPadOS 13.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"macOS Catalina 10.15.6","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"tvOS 13.4.8","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"watchOS 6.2.8","versionType":"custom"}]},{"vendor":"Apple","product":"iTunes for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iTunes 12.10.8 for Windows","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 11.3","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows (Legacy)","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 7.20","versionType":"custom"}]}],"references":["https://support.apple.com/kb/HT211843","https://support.apple.com/kb/HT211850","https://support.apple.com/kb/HT211844","https://support.apple.com/kb/HT211289","https://support.apple.com/kb/HT211288","https://support.apple.com/kb/HT211290","https://support.apple.com/kb/HT211291","https://support.apple.com/kb/HT211293","https://support.apple.com/kb/HT211294","https://support.apple.com/kb/HT211295","https://support.apple.com/kb/HT211931","https://support.apple.com/kb/HT211952","http://seclists.org/fulldisclosure/2020/Nov/19","http://seclists.org/fulldisclosure/2020/Nov/20","http://seclists.org/fulldisclosure/2020/Nov/22","https://support.apple.com/kb/HT211935","http://seclists.org/fulldisclosure/2020/Dec/32"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:47.279Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/9xxx/CVE-2020-9876.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-9876","state":"PUBLISHED","datePublished":"2020-10-22T17:58:31.000Z","dateUpdated":"2024-08-04T10:43:05.452Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2020-03-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution."}],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"iOS 13.6 and iPadOS 13.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"macOS Catalina 10.15.6","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"tvOS 13.4.8","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"watchOS 6.2.8","versionType":"custom"}]},{"vendor":"Apple","product":"iTunes for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iTunes 12.10.8 for Windows","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 11.3","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows (Legacy)","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 7.20","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/kb/HT211843","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT211850","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT211844","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211288","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211290","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211291","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211293","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211294","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211295","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211931","tags":["x_refsource_CONFIRM"]},{"url":"https://support.apple.com/kb/HT211952","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/19","name":"20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/20","name":"20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/22","name":"20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://support.apple.com/kb/HT211935","tags":["x_refsource_CONFIRM"]},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","tags":["mailing-list","x_refsource_FULLDISC"]}],"problemTypes":[{"descriptions":[{"description":"Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"apple","dateUpdated":"2020-12-15T19:06:58.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2020-9876","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"iOS","version":{"version_data":[{"version_affected":"<","version_value":"iOS 13.6 and iPadOS 13.6"}]}},{"product_name":"macOS","version":{"version_data":[{"version_affected":"<","version_value":"macOS Catalina 10.15.6"}]}},{"product_name":"tvOS","version":{"version_data":[{"version_affected":"<","version_value":"tvOS 13.4.8"}]}},{"product_name":"watchOS","version":{"version_data":[{"version_affected":"<","version_value":"watchOS 6.2.8"}]}},{"product_name":"iTunes for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iTunes 12.10.8 for Windows"}]}},{"product_name":"iCloud for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iCloud for Windows 11.3"}]}},{"product_name":"iCloud for Windows (Legacy)","version":{"version_data":[{"version_affected":"<","version_value":"iCloud for Windows 7.20"}]}}]},"vendor_name":"Apple"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution"}]}]},"references":{"reference_data":[{"name":"https://support.apple.com/kb/HT211843","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211843"},{"name":"https://support.apple.com/kb/HT211850","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211850"},{"name":"https://support.apple.com/kb/HT211844","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211844"},{"name":"https://support.apple.com/kb/HT211289","refsource":"MISC","url":"https://support.apple.com/kb/HT211289"},{"name":"https://support.apple.com/kb/HT211288","refsource":"MISC","url":"https://support.apple.com/kb/HT211288"},{"name":"https://support.apple.com/kb/HT211290","refsource":"MISC","url":"https://support.apple.com/kb/HT211290"},{"name":"https://support.apple.com/kb/HT211291","refsource":"MISC","url":"https://support.apple.com/kb/HT211291"},{"name":"https://support.apple.com/kb/HT211293","refsource":"MISC","url":"https://support.apple.com/kb/HT211293"},{"name":"https://support.apple.com/kb/HT211294","refsource":"MISC","url":"https://support.apple.com/kb/HT211294"},{"name":"https://support.apple.com/kb/HT211295","refsource":"MISC","url":"https://support.apple.com/kb/HT211295"},{"name":"https://support.apple.com/kb/HT211931","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211931"},{"name":"https://support.apple.com/kb/HT211952","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211952"},{"name":"20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2020/Nov/19"},{"name":"20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2020/Nov/20"},{"name":"20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2020/Nov/22"},{"name":"https://support.apple.com/kb/HT211935","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211935"},{"name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2020/Dec/32"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/kb/HT211843","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/kb/HT211850","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/kb/HT211844","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211288","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211290","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211291","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211293","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211294","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211295","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211931","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://support.apple.com/kb/HT211952","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/19","name":"20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/20","name":"20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2020/Nov/22","name":"20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211935","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:43:05.452Z"}}]}}}