CVE-2020-9907

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An...

Basic Information

CVE State: PUBLISHED
Reserved Date: March 02, 2020
Published Date: October 16, 2020
Last Updated: January 29, 2025
Vendor: Apple
Product: iOS, tvOS
Description: A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2022-06-27 00:00:00 UTC) Source

References

https://support.apple.com/HT211288 https://support.apple.com/HT211290

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-06-27 00:00:00 UTC