Description
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple Security Update - Catalina
unspecified to < 2021affected
Apple iOS and iPadOS
unspecified to < 15affected
Apple tvOS
unspecified to < 15affected
Apple iTunes for Windows
unspecified to < 12.12affected
Apple watchOS
unspecified to < 8affected
References
- https://support.apple.com/kb/HT212804 ↗
- https://support.apple.com/en-us/HT212805 ↗
- https://support.apple.com/en-us/HT212814 ↗
- https://support.apple.com/en-us/HT212819 ↗
- https://support.apple.com/en-us/HT212815 ↗
- https://support.apple.com/en-us/HT212817 ↗
- http://seclists.org/fulldisclosure/2021/Oct/62 ↗
- http://seclists.org/fulldisclosure/2021/Oct/63 ↗
- http://seclists.org/fulldisclosure/2021/Oct/61 ↗
- https://support.apple.com/kb/HT212953 ↗