First published: Mon Dec 14 2020(Updated: )
An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font may result in the disclosure of process memory.
Credit: Mateusz Jurczyk Google Project ZeroMateusz Jurczyk Google Project ZeroMateusz Jurczyk Google Project ZeroMateusz Jurczyk Google Project Zero product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple watchOS | <7.2 | 7.2 |
Apple tvOS | <14.3 | 14.3 |
Apple iOS | <14.3 | 14.3 |
Apple iPadOS | <14.3 | 14.3 |
Apple macOS Big Sur | <11.1 | 11.1 |
Apple Catalina | ||
Apple Mojave | ||
Apple iPadOS | <14.3 | |
Apple iPhone OS | <14.3 | |
Apple Mac OS X | >=10.14<10.14.6 | |
Apple Mac OS X | >=10.15<10.15.7 | |
Apple Mac OS X | =10.14.6 | |
Apple Mac OS X | =10.14.6-security_update_2019-001 | |
Apple Mac OS X | =10.14.6-security_update_2019-002 | |
Apple Mac OS X | =10.14.6-security_update_2019-006 | |
Apple Mac OS X | =10.14.6-security_update_2019-007 | |
Apple Mac OS X | =10.14.6-security_update_2020-001 | |
Apple Mac OS X | =10.14.6-security_update_2020-002 | |
Apple Mac OS X | =10.14.6-security_update_2020-003 | |
Apple Mac OS X | =10.14.6-security_update_2020-004 | |
Apple Mac OS X | =10.14.6-security_update_2020-005 | |
Apple Mac OS X | =10.14.6-security_update_2020-006 | |
Apple Mac OS X | =10.14.6-supplemental_update | |
Apple Mac OS X | =10.14.6-supplemental_update_2 | |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-supplemental_update | |
Apple macOS | >=11.0<11.1.0 | |
Apple tvOS | <14.3 | |
Apple watchOS | <7.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-27946 is a vulnerability in FontParser that allows for information disclosure.
CVE-2020-27946 affects Apple iOS versions up to and exclusive of 14.3.
CVE-2020-27946 affects Apple iPadOS versions up to and exclusive of 14.3.
CVE-2020-27946 affects Apple tvOS versions up to and exclusive of 14.3.
CVE-2020-27946 affects Apple macOS Big Sur versions up to and exclusive of 11.1.
CVE-2020-27946 has no specified impact on Apple Catalina.
CVE-2020-27946 has no specified impact on Apple Mojave.
CVE-2020-27946 affects Apple watchOS versions up to and exclusive of 7.2.
To fix CVE-2020-27946, apply the recommended updates provided by Apple.