First published: Mon May 18 2020(Updated: )
A denial of service issue was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A remote attacker may be able to cause a denial of service.
Credit: Jannik Lorenz SEEMOOJannik Lorenz SEEMOOJannik Lorenz SEEMOOJannik Lorenz SEEMOO product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple tvOS | <13.4.5 | 13.4.5 |
Apple watchOS | <6.2.5 | 6.2.5 |
Apple iOS | <13.5 | 13.5 |
Apple iPadOS | <13.5 | 13.5 |
Apple iPadOS | <13.5 | |
Apple iPhone OS | <13.5 | |
Apple Mac OS X | <10.15.5 | |
Apple tvOS | <13.4.5 | |
Apple watchOS | <6.2.5 | |
Apple macOS Catalina | <10.15.5 | 10.15.5 |
Apple Mojave | ||
Apple High Sierra |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-9827 is a vulnerability in the Accounts feature that could be exploited to cause a denial of service.
CVE-2020-9827 affects Apple watchOS versions up to but excluding 6.2.5.
CVE-2020-9827 affects Apple macOS Catalina versions up to but excluding 10.15.5.
CVE-2020-9827 affects Apple iOS versions up to but excluding 13.5.
CVE-2020-9827 affects Apple iPadOS versions up to but excluding 13.5.
CVE-2020-9827 affects Apple tvOS versions up to but excluding 13.4.5.
CVE-2020-9827 is a denial of service vulnerability that has been addressed with improved input validation.
To fix CVE-2020-9827, update to Apple watchOS 6.2.5, macOS Catalina 10.15.5, iOS 13.5, iPadOS 13.5, or tvOS 13.4.5.
The CWE ID for CVE-2020-9827 is 20.