Apple · iOS, iPadOS, and watchOS
CVE-2020-9818
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
Cos'è
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.
CISA: Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 3 maggio 2022
Altre falle sfruttate di Apple
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 11 set 2023 | Wallet Code Execution | iOS, iPadOS, and watchOS | Alta 7,8 | 4,4% |
| 3 nov 2021 | Memory Corruption | iOS, iPadOS, and watchOS | Media 4,3 | 2,2% |
| 3 nov 2021 | WebKit Cross-Site Scripting (XSS) | iOS, iPadOS, and watchOS | Media 6,1 | 7,1% |
| 29 set 2026 | Out-of-Bounds Write | Multiple Products | Alta 8,8 | 26% |
| 18 ago 2026 | Improper Authentication | macOS | Critica 9,8 | 1,7% |
| 20 mar 2026 | Buffer Overflow | Multiple Products | Alta 8,8 | 1,7% |
| 20 mar 2026 | Improper Locking | Multiple Products | Alta 7,8 | 0,4% |
| 20 mar 2026 | Classic Buffer Overflow | Multiple Products | Media 5,5 | 0,4% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.