PT-2020-20930

CVE-2020-9999

Published

2020-11-12

Updated

2021-07-21

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.0.1 iTunes for Windows versions prior to 12.10.9

Description A memory corruption issue was addressed with improved state management. Processing a maliciously crafted text file may lead to arbitrary code execution.

Recommendations For macOS versions prior to 11.0.1, update to macOS Big Sur 11.0.1 to resolve the issue. For iTunes for Windows versions prior to 12.10.9, update to iTunes for Windows 12.10.9 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Junzhi Lu

Mickey Jin

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2020-9999