CVE-2020-27942: High severity apple macos vulnerability
Published Nov 12, 2020
·Updated
A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing a maliciously crafted font file may lead to arbitrary code execution.
Other sources
FontParser. A logic issue was addressed with improved state management.
Credit
an anonymous researcher, an anonymous researcher, an anonymous researcher
Affected Software
36 affected componentsFixes available
Apple macOS Big Sur<11.0.1
11.0.1
Apple Catalina
apple Mojave
Apple iOS and macOS>=10.14<=10.14.5
Apple iOS and macOS>=10.15<=10.15.5
Apple iOS and macOS=10.14.6
Apple iOS and macOS=10.14.6-security_update_2019-001
Apple iOS and macOS=10.14.6-security_update_2019-002
Apple iOS and macOS=10.14.6-security_update_2019-004
Apple iOS and macOS=10.14.6-security_update_2019-005
Apple iOS and macOS=10.14.6-security_update_2019-006
Apple iOS and macOS=10.14.6-security_update_2019-007
Apple iOS and macOS=10.14.6-security_update_2020-001
Apple iOS and macOS=10.14.6-security_update_2020-002
Apple iOS and macOS=10.14.6-security_update_2020-003
Apple iOS and macOS=10.14.6-security_update_2020-004
Apple iOS and macOS=10.14.6-security_update_2020-005
Apple iOS and macOS=10.14.6-security_update_2020-006
Apple iOS and macOS=10.14.6-security_update_2020-007
Apple iOS and macOS=10.14.6-security_update_2021-001
Apple iOS and macOS=10.14.6-security_update_2021-002
Apple iOS and macOS=10.14.6-security_update_2021-003
Apple iOS and macOS=10.14.6-security_update_2021-004
Apple iOS and macOS=10.14.6-supplemental_update
Apple iOS and macOS=10.14.6-supplemental_update_2
Apple iOS and macOS=10.15.6
Apple iOS and macOS=10.15.6-supplemental_update
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2020-005
Apple iOS and macOS=10.15.7-security_update_2020-007
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-security_update_2021-003
Apple iOS and macOS=10.15.7-supplemental_update
Event History
Sep 8, 2021
CVE Published
via MITRE·02:55 PM
Data Sourced
via MITRE·02:55 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-27914
- CVE-2020-27915
- CVE-2020-27903
- CVE-2020-27910
- CVE-2020-27916
- CVE-2020-9943
- CVE-2020-9944
- CVE-2020-27906
- CVE-2020-27945
- CVE-2020-27908
- CVE-2020-27909
- CVE-2020-9960
- CVE-2020-10017
- CVE-2020-9949
- CVE-2020-9897
- CVE-2020-9883
- CVE-2020-10003
- CVE-2020-27922
- CVE-2020-9999
- CVE-2020-27937
- CVE-2020-9965
- CVE-2020-9966
- CVE-2020-27894
- CVE-2020-36615
- CVE-2021-1790
- CVE-2021-1775
- CVE-2020-29629
- CVE-2020-27942
- CVE-2020-9962
- CVE-2020-27952
- CVE-2020-9956
- CVE-2020-27931
- CVE-2020-27930
- CVE-2020-27927
- CVE-2020-29639
- CVE-2020-10002
- CVE-2020-9978
- CVE-2020-9955
- CVE-2020-27924
- CVE-2020-27912
- CVE-2020-27923
- CVE-2020-9876
- CVE-2020-10015
- CVE-2020-27897
- CVE-2020-27907
- CVE-2020-27919
- CVE-2020-9967
- CVE-2020-9975
- CVE-2020-27921
- CVE-2020-27904
- CVE-2019-14899
- CVE-2020-27950
- CVE-2020-9974
- CVE-2020-10016
- CVE-2020-27932
- CVE-2020-27917
- CVE-2020-27920
- CVE-2020-27911
- CVE-2020-9971
- CVE-2020-10014
- CVE-2020-10010
- CVE-2020-9941
- CVE-2020-9988
- CVE-2020-9989
- CVE-2020-10011
- CVE-2020-13524
- CVE-2020-10004
- CVE-2020-9996
- CVE-2020-27901
- CVE-2020-27900
- CVE-2019-20838
- CVE-2020-14155
- CVE-2020-10007
- CVE-2020-27896
- CVE-2020-9963
- CVE-2020-10012
- CVE-2020-10663
- CVE-2020-9945
- CVE-2020-9977
- CVE-2020-9942
- CVE-2020-9987
- CVE-2021-1803
- CVE-2020-9969
- CVE-2020-27893
- CVE-2021-1755
- CVE-2020-10005
- CVE-2020-9991
- CVE-2020-9849
- CVE-2020-15358
- CVE-2020-13631
- CVE-2020-13434
- CVE-2020-13435
- CVE-2020-13630
- CVE-2020-27899
- CVE-2020-10009
- CVE-2020-10008
- CVE-2020-27918
- CVE-2020-9947
- CVE-2020-9950
- CVE-2020-27898
- CVE-2020-27935
- CVE-2020-10006
- CVE-2021-1797
- CVE-2021-1810
- CVE-2021-1808
- CVE-2021-1857
- CVE-2021-1809
- CVE-2021-1846
- CVE-2021-1847
- CVE-2021-1811
- CVE-2020-8284
- CVE-2020-8285
- CVE-2020-8286
- CVE-2021-1784
- CVE-2021-1881
- CVE-2021-1813
- CVE-2021-1882
- CVE-2021-1843
- CVE-2021-1858
- CVE-2021-1834
- CVE-2021-1841
- CVE-2021-1860
- CVE-2021-1851
- CVE-2021-1840
- CVE-2021-1832
- CVE-2021-30652
- CVE-2021-1875
- CVE-2021-1824
- CVE-2021-1876
- CVE-2021-1739
- CVE-2021-1740
- CVE-2021-1878
- CVE-2021-30657
- CVE-2021-1868
- CVE-2020-8037
- CVE-2021-1839
- CVE-2021-1828
- CVE-2021-30655
- CVE-2020-3838
- CVE-2021-1873
- CVE-2021-1805
- CVE-2021-1806
Frequently Asked Questions
1
What is CVE-2020-27942?
CVE-2020-27942 is a vulnerability in FontParser that was addressed with improved state management.
2
Which software versions are affected by CVE-2020-27942?
CVE-2020-27942 affects Apple Catalina, Apple Mojave, and Apple macOS Big Sur 11.0.1.
3
How can I fix CVE-2020-27942?
To fix CVE-2020-27942, update to the latest version of Apple Catalina, Apple Mojave, or Apple macOS Big Sur 11.0.1.
4
Where can I find more information about CVE-2020-27942?
You can find more information about CVE-2020-27942 on the Apple support website.
5
Are there any known exploits for CVE-2020-27942?
No known exploits for CVE-2020-27942 have been reported.