CVE-2020-6147: Buffer Overflow

Reference Links

• https://support.apple.com/en-us/HT211850 (Advisory)
• http://seclists.org/fulldisclosure/2020/Nov/20
• https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094

Parent vulnerabilities

(Appears in the following advisories)

• HT211850

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-9958
• CVE-2020-9979
• CVE-2020-9943
• CVE-2020-9944
• CVE-2020-9960
• CVE-2020-9954
• CVE-2020-9949
• CVE-2020-9999
• CVE-2020-9965
• CVE-2020-9966
• CVE-2020-29629
• CVE-2020-9956
• CVE-2020-9962
• CVE-2020-27931
• CVE-2020-29639
• CVE-2020-9978
• CVE-2020-9773
• CVE-2020-9992
• CVE-2020-36521
• CVE-2020-9955
• CVE-2020-9961
• CVE-2020-9876
• CVE-2020-9964
• CVE-2020-9967
• CVE-2020-9975
• CVE-2019-14899
• CVE-2020-9976
• CVE-2020-9981
• CVE-2020-9971
• CVE-2020-9941
• CVE-2020-9988
• CVE-2020-9989
• CVE-2020-13520
• CVE-2020-6147
• CVE-2020-9972
• CVE-2020-9973
• CVE-2020-9996
• CVE-2020-9946
• CVE-2020-9963
• CVE-2020-9977
• CVE-2020-9993
• CVE-2020-9969
• CVE-2020-9968
• CVE-2020-9959
• CVE-2020-13434
• CVE-2020-13435
• CVE-2020-9991
• CVE-2020-9849
• CVE-2020-15358
• CVE-2020-13631
• CVE-2020-13630
• CVE-2020-9947
• CVE-2020-9950
• CVE-2020-9951
• CVE-2020-9983
• CVE-2020-9952
• CVE-2020-10013

Frequently Asked Questions

• What is CVE-2020-6147?

  CVE-2020-6147 is a buffer overflow issue in Model I/O that has been addressed with improved memory handling.

• What software versions are affected by CVE-2020-6147?

  CVE-2020-6147 affects Apple iOS and Apple iPadOS versions up to, but not including, 14.0.

• How can I fix CVE-2020-6147?

  To fix CVE-2020-6147, update your Apple iOS or Apple iPadOS to version 14.0 or later.

• Is there a reference for CVE-2020-6147?

  Yes, you can find more information about CVE-2020-6147 at the following link: https://support.apple.com/en-us/HT211850

• What is the Common Weakness Enumeration (CWE) ID for CVE-2020-6147?

  The CWE ID for CVE-2020-6147 is 119.