First published: Wed Jul 15 2020(Updated: )
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, watchOS 6.2.8. A malicious application may be able to execute arbitrary code with system privileges.
Credit: Proteas Proteas product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPadOS | <13.6 | |
Apple iPhone OS | <13.6 | |
Apple watchOS | <6.2.8 | |
Apple iOS | <13.6 | 13.6 |
Apple iPadOS | <13.6 | 13.6 |
Apple watchOS | <6.2.8 | 6.2.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2020-9923 refers to a memory corruption issue in the Kernel of Apple iOS, iPadOS, and watchOS.
CVE-2020-9923 is a memory corruption vulnerability that can be exploited to execute arbitrary code on affected devices, making it a high-severity vulnerability.
If you are using Apple iOS version up to and excluding 13.6, Apple iPadOS version up to and excluding 13.6, or Apple watchOS version up to and excluding 6.2.8, your device is affected by CVE-2020-9923.
To fix CVE-2020-9923, update your Apple iOS to version 13.6 or later, Apple iPadOS to version 13.6 or later, or Apple watchOS to version 6.2.8 or later.
You can find more information about CVE-2020-9923 on the Apple support page: [https://support.apple.com/en-us/HT211288](https://support.apple.com/en-us/HT211288)