NetSight
high8.8

CVE-2020-9870

A logic issue was addressed with improved validation.

Impact

A logic issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code.

Affected products

VendorProductAffected versions
AppleIpados
before 13.6
AppleIphone Os
before 13.6
AppleMac Os X
before 10.15.6
AppleTvos
before 13.4.8

Weakness classification

References