CVE-2020-9785: Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious applica...

Summary

Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.

What to do

Update apple ipados to version 13.4 or later.
Update apple iphone_os to version 13.4 or later.
Update apple mac_os_x to version 10.15.4 or later.
Update apple tvos to version 13.4 or later.
Update apple watchos to version 6.2 or later.

Affected software

Vendor	Product	Affected versions
apple	ipados	< 13.4 `cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	< 13.4 `cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	< 10.15.4 `cpe:2.3:o:apple:mac_os_x::::::::`
apple	tvos	< 13.4 `cpe:2.3:o:apple:tvos::::::::`
apple	watchos	< 6.2 `cpe:2.3:o:apple:watchos::::::::`

Original advisory text

Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious applica...

Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.

References

https://support.apple.com/HT211100 Vendor Advisory
https://support.apple.com/HT211101 Vendor Advisory
https://support.apple.com/HT211102 Vendor Advisory
https://support.apple.com/HT211103 Vendor Advisory