First published: Mon May 18 2020(Updated: )
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
Credit: Xinru Chi Tielei Wang Pangu Lab product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <13.4.5 | 13.4.5 |
macOS Catalina | <10.15.5 | 10.15.5 |
macOS Mojave | ||
macOS High Sierra | ||
Apple iOS, iPadOS, and watchOS | <13.5 | 13.5 |
Apple iOS, iPadOS, and watchOS | <13.5 | 13.5 |
Apple iOS, iPadOS, and watchOS | <6.2.5 | 6.2.5 |
Apple iOS, iPadOS, and watchOS | <13.5 | |
iOS | <13.5 | |
Apple iOS and macOS | <10.15.5 | |
tvOS | <13.4.5 | |
Apple iOS, iPadOS, and watchOS | <6.2.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-9821 is a memory corruption vulnerability in the Kernel that was addressed with improved state management.
CVE-2020-9821 affects Apple watchOS 6.2.5, Apple macOS Catalina 10.15.5, Apple iOS 13.5, Apple iPadOS 13.5, and Apple tvOS 13.4.5.
Yes, the remedy for CVE-2020-9821 is to update to the specified versions of the affected software.
More information about CVE-2020-9821 can be found on the Apple support website.