An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

Apple

watchOS

Affected Versions:

unspecified

Apple

iOS and iPadOS

Affected Versions:

unspecified

Apple

tvOS

Affected Versions:

unspecified

References

https://support.apple.com/kb/HT211931

https://support.apple.com/en-us/HT211928

https://support.apple.com/en-us/HT211929

https://support.apple.com/en-us/HT211930

http://seclists.org/fulldisclosure/2020/Dec/32

https://www.zerodayinitiative.com/advisories/ZDI-21-374/

Published: 2020-12-08T20:09:47

Last Modified: 2024-08-04T16:25:43.802Z

Copied to clipboard!