CVE-2020-6147: Buffer Overflow

Q: What is CVE-2020-6147?

CVE-2020-6147 is a buffer overflow issue in Model I/O that has been addressed with improved memory handling.

Q: What software versions are affected by CVE-2020-6147?

CVE-2020-6147 affects Apple iOS and Apple iPadOS versions up to, but not including, 14.0.

Q: How can I fix CVE-2020-6147?

To fix CVE-2020-6147, update your Apple iOS or Apple iPadOS to version 14.0 or later.

Q: Is there a reference for CVE-2020-6147?

Yes, you can find more information about CVE-2020-6147 at the following link: https://support.apple.com/en-us/HT211850

Q: What is the Common Weakness Enumeration (CWE) ID for CVE-2020-6147?

The CWE ID for CVE-2020-6147 is 119.

Published Sep 16, 2020

Updated

Model I/O. A buffer overflow issue was addressed with improved memory handling.

Other sources

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.

Credit

Aleksandar Nikolic(Cisco Talos)

Affected Software

5 affected componentsFixes available

Apple iOS and iPadOS<14.0

14.0

Apple iOS, iPadOS, and macOS<14.0

14.0

Pixar OpenUSD=20.05

Apple iOS, iPadOS, and macOS<14.0

iPhone OS<14.0

Event History

Nov 13, 2020

CVE Published

via MITRE·02:43 PM

Data Sourced

via MITRE·02:43 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

HT211850

Frequently Asked Questions

What is CVE-2020-6147?

CVE-2020-6147 is a buffer overflow issue in Model I/O that has been addressed with improved memory handling.

What software versions are affected by CVE-2020-6147?

CVE-2020-6147 affects Apple iOS and Apple iPadOS versions up to, but not including, 14.0.

How can I fix CVE-2020-6147?

To fix CVE-2020-6147, update your Apple iOS or Apple iPadOS to version 14.0 or later.

Is there a reference for CVE-2020-6147?