CVE-2020-9884: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a malicious...

Summary

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

What to do

Update apple ipados to version 13.6 or later.
Update apple iphone_os to version 13.6 or later.
Update apple mac_os_x to version 10.15.6 or later.
Update apple tvos to version 13.4.8 or later.
Update apple watchos to version 6.2.8 or later.

Affected software

Vendor	Product	Affected versions
apple	ipados	< 13.6 `cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	< 13.6 `cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	< 10.15.6 `cpe:2.3:o:apple:mac_os_x::::::::`
apple	tvos	< 13.4.8 `cpe:2.3:o:apple:tvos::::::::`
apple	watchos	< 6.2.8 `cpe:2.3:o:apple:watchos::::::::`

Original advisory text

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a malicious...

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

References

https://support.apple.com/HT211289 Vendor Advisory