Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image ...

CVE-2020-27939 · published 5 years ago
Summary

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.

What to do
  • Update apple macos to version 11.1.0 or later.
Affected software
VendorProductAffected versions
apple macos < 11.1.0
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Original advisory text
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image ...
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published2 Apr 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-27939 · NVD
Track software like this
Free during beta