CVE-2020-9800: High severity tvos vulnerability

Q: What is CVE-2020-9800?

CVE-2020-9800 is a type confusion issue in WebKit that has been addressed with improved memory handling.

Q: Which software are affected by CVE-2020-9800?

CVE-2020-9800 affects Apple Safari, Apple iOS, Apple iPadOS, Apple tvOS, Apple watchOS, Apple iTunes for Windows, and Apple iCloud for Windows.

Q: What is the remedy for CVE-2020-9800?

The remedy for CVE-2020-9800 depends on the affected software version. Please refer to the respective Apple support articles for the specific remedy.

Q: Where can I find more information about CVE-2020-9800?

You can find more information about CVE-2020-9800 on the Apple support articles: [link1], [link2], [link3].

Published May 18, 2020

Updated

WebKit. A type confusion issue was addressed with improved memory handling.

Other sources

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

Credit

Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative), Brendan Draper@@6r3nd4n(Trend Micro Zero Day Initiative)

Affected Software

16 affected componentsFixes available

Apple tvOS<13.4.5

13.4.5

Apple WatchOS<6.2.5

6.2.5

Apple iCloud for Windows<11.2

11.2

Apple iCloud for Windows<7.19

7.19

Apple iTunes for Windows<12.10.7

12.10.7

Apple Safari<13.1.1

13.1.1

Apple iOS<13.5

13.5

Apple iPadOS<13.5

13.5

Apple Icloud Windows<7.19

Apple Icloud Windows>=11.0<11.2

Apple Itunes Windows<12.10.7

Apple Safari<13.1.1

Apple iPadOS<13.5

Apple iPhone OS<13.5

Apple iOS and macOS<10.15.5

Apple WatchOS<6.2.5

Event History

Jun 9, 2020

CVE Published

via MITRE·04:06 PM

Data Sourced

via MITRE·04:06 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is CVE-2020-9800?

CVE-2020-9800 is a type confusion issue in WebKit that has been addressed with improved memory handling.

Which software are affected by CVE-2020-9800?

CVE-2020-9800 affects Apple Safari, Apple iOS, Apple iPadOS, Apple tvOS, Apple watchOS, Apple iTunes for Windows, and Apple iCloud for Windows.

What is the remedy for CVE-2020-9800?

The remedy for CVE-2020-9800 depends on the affected software version. Please refer to the respective Apple support articles for the specific remedy.

Where can I find more information about CVE-2020-9800?