First published: Thu Nov 05 2020(Updated: )
Model I/O. An out-of-bounds read was addressed with improved input validation.
Credit: Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco Talos talos-cna@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS | <14.2 | 14.2 |
Apple iPadOS | <14.2 | 14.2 |
Apple macOS Big Sur | <11.0.1 | 11.0.1 |
Pixar OpenUSD | =20.05 | |
Apple Mac OS X | >=10.14.0<10.14.6 | |
Apple Mac OS X | >=10.15<10.15.7 | |
Apple Mac OS X | =10.14.6-security_update_2019-001 | |
Apple Mac OS X | =10.14.6-security_update_2019-002 | |
Apple Mac OS X | =10.14.6-security_update_2019-004 | |
Apple Mac OS X | =10.14.6-security_update_2019-005 | |
Apple Mac OS X | =10.14.6-security_update_2019-006 | |
Apple Mac OS X | =10.14.6-security_update_2019-007 | |
Apple Mac OS X | =10.14.6-security_update_2020-001 | |
Apple Mac OS X | =10.14.6-security_update_2020-002 | |
Apple Mac OS X | =10.14.6-security_update_2020-003 | |
Apple Mac OS X | =10.14.6-security_update_2020-004 | |
Apple Mac OS X | =10.14.6-security_update_2020-005 | |
Apple Mac OS X | =10.14.6-security_update_2020-006 | |
Apple Mac OS X | =10.14.6-supplemental_update | |
Apple Mac OS X | =10.14.6-supplemental_update_2 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple macOS | >=11.0<11.1 | |
Apple macOS Big Sur | <11.1 | 11.1 |
Apple Catalina | ||
Apple Mojave |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-13524 is a vulnerability in Model I/O that allows for an out-of-bounds read.
The severity of CVE-2020-13524 is not specified in the provided information.
CVE-2020-13524 affects Apple iOS up to version 14.2.
CVE-2020-13524 affects Apple iPadOS up to version 14.2.
CVE-2020-13524 affects Apple macOS Big Sur up to version 11.0.1 or 11.1, depending on the version.
There is no information provided about how CVE-2020-13524 affects Apple Catalina.
There is no information provided about how CVE-2020-13524 affects Apple Mojave.
To fix CVE-2020-13524, update to the latest version of the affected software, as specified in the provided links.
More information about CVE-2020-13524 can be found in the provided references: [Link 1](https://support.apple.com/en-us/HT211929), [Link 2](https://support.apple.com/en-us/HT212011), [Link 3](https://support.apple.com/en-us/HT211931).
The CWE of CVE-2020-13524 is 20.