CVEvulnerability
CVE-2020-9849
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-12-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0. A remote attacker may be able to leak memory.
Affected configurations
• apple icloud (< 11.5)
• apple itunes (>= 12.0.0 < 12.10.9)
• apple ipados (< 14.0)
• apple macos (< 11.0.1)
• apple tvos (< 14.0)
• apple watchos (< 7.0)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E lists.apache.org
- https://support.apple.com/en-us/HT211843 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211844 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211850 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211931 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211935 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211952 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2020/Dec/32 Mailing List, Third Party Advisory
- https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E lists.apache.org
- https://support.apple.com/en-us/HT211843 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211844 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211850 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211931 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211935 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT211952 Release Notes, Vendor Advisory