Apple · iOS, iPadOS, and watchOS
CVE-2020-9818
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
O que é
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.
CISA: Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 3 de maio de 2022
Mais falhas exploradas de Apple
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 11 de set. de 2023 | Wallet Code Execution | iOS, iPadOS, and watchOS | Alto 7,8 | 4,4% |
| 3 de nov. de 2021 | Memory Corruption | iOS, iPadOS, and watchOS | Média 4,3 | 2,2% |
| 3 de nov. de 2021 | WebKit Cross-Site Scripting (XSS) | iOS, iPadOS, and watchOS | Média 6,1 | 7,1% |
| 29 de set. de 2026 | Out-of-Bounds Write | Multiple Products | Alto 8,8 | 26% |
| 18 de ago. de 2026 | Improper Authentication | macOS | Crítica 9,8 | 1,7% |
| 20 de mar. de 2026 | Buffer Overflow | Multiple Products | Alto 8,8 | 1,7% |
| 20 de mar. de 2026 | Improper Locking | Multiple Products | Alto 7,8 | 0,4% |
| 20 de mar. de 2026 | Classic Buffer Overflow | Multiple Products | Média 5,5 | 0,4% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.