{"id":"CVE-2020-9883","state":"PUBLISHED","title":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.","description":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution.","publishedAt":"2020-10-22T17:59:36.000Z","updatedAt":"2024-08-04T10:43:05.441Z","severity":null,"assigner":"apple","products":["Apple iOS","Apple macOS","Apple tvOS","Apple watchOS","Apple iTunes for Windows","Apple iCloud for Windows","Apple iCloud for Windows (Legacy)"],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"iOS 13.6 and iPadOS 13.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"macOS Catalina 10.15.6","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"tvOS 13.4.8","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"watchOS 6.2.8","versionType":"custom"}]},{"vendor":"Apple","product":"iTunes for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iTunes 12.10.8 for Windows","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 11.3","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows (Legacy)","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 7.20","versionType":"custom"}]}],"references":["https://support.apple.com/kb/HT211289","https://support.apple.com/kb/HT211288","https://support.apple.com/kb/HT211290","https://support.apple.com/kb/HT211291","https://support.apple.com/kb/HT211293","https://support.apple.com/kb/HT211294","https://support.apple.com/kb/HT211295","https://support.apple.com/kb/HT211931","https://www.zerodayinitiative.com/advisories/ZDI-20-1389/","http://seclists.org/fulldisclosure/2020/Dec/32"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:47.279Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/9xxx/CVE-2020-9883.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-9883","state":"PUBLISHED","datePublished":"2020-10-22T17:59:36.000Z","dateUpdated":"2024-08-04T10:43:05.441Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2020-03-02T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution."}],"affected":[{"vendor":"Apple","product":"iOS","versions":[{"version":"unspecified","status":"affected","lessThan":"iOS 13.6 and iPadOS 13.6","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"macOS Catalina 10.15.6","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"tvOS 13.4.8","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"watchOS 6.2.8","versionType":"custom"}]},{"vendor":"Apple","product":"iTunes for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iTunes 12.10.8 for Windows","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 11.3","versionType":"custom"}]},{"vendor":"Apple","product":"iCloud for Windows (Legacy)","versions":[{"version":"unspecified","status":"affected","lessThan":"iCloud for Windows 7.20","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211288","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211290","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211291","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211293","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211294","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211295","tags":["x_refsource_MISC"]},{"url":"https://support.apple.com/kb/HT211931","tags":["x_refsource_CONFIRM"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1389/","tags":["x_refsource_MISC"]},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","tags":["mailing-list","x_refsource_FULLDISC"]}],"problemTypes":[{"descriptions":[{"description":"Processing a maliciously crafted image may lead to arbitrary code execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"apple","dateUpdated":"2020-12-15T19:06:59.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2020-9883","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"iOS","version":{"version_data":[{"version_affected":"<","version_value":"iOS 13.6 and iPadOS 13.6"}]}},{"product_name":"macOS","version":{"version_data":[{"version_affected":"<","version_value":"macOS Catalina 10.15.6"}]}},{"product_name":"tvOS","version":{"version_data":[{"version_affected":"<","version_value":"tvOS 13.4.8"}]}},{"product_name":"watchOS","version":{"version_data":[{"version_affected":"<","version_value":"watchOS 6.2.8"}]}},{"product_name":"iTunes for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iTunes 12.10.8 for Windows"}]}},{"product_name":"iCloud for Windows","version":{"version_data":[{"version_affected":"<","version_value":"iCloud for Windows 11.3"}]}},{"product_name":"iCloud for Windows (Legacy)","version":{"version_data":[{"version_affected":"<","version_value":"iCloud for Windows 7.20"}]}}]},"vendor_name":"Apple"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to arbitrary code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Processing a maliciously crafted image may lead to arbitrary code execution"}]}]},"references":{"reference_data":[{"name":"https://support.apple.com/kb/HT211289","refsource":"MISC","url":"https://support.apple.com/kb/HT211289"},{"name":"https://support.apple.com/kb/HT211288","refsource":"MISC","url":"https://support.apple.com/kb/HT211288"},{"name":"https://support.apple.com/kb/HT211290","refsource":"MISC","url":"https://support.apple.com/kb/HT211290"},{"name":"https://support.apple.com/kb/HT211291","refsource":"MISC","url":"https://support.apple.com/kb/HT211291"},{"name":"https://support.apple.com/kb/HT211293","refsource":"MISC","url":"https://support.apple.com/kb/HT211293"},{"name":"https://support.apple.com/kb/HT211294","refsource":"MISC","url":"https://support.apple.com/kb/HT211294"},{"name":"https://support.apple.com/kb/HT211295","refsource":"MISC","url":"https://support.apple.com/kb/HT211295"},{"name":"https://support.apple.com/kb/HT211931","refsource":"CONFIRM","url":"https://support.apple.com/kb/HT211931"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-20-1389/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1389/"},{"name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","refsource":"FULLDISC","url":"http://seclists.org/fulldisclosure/2020/Dec/32"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211288","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211290","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211291","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211293","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211294","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211295","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://support.apple.com/kb/HT211931","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1389/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2020/Dec/32","name":"20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:43:05.441Z"}}]}}}