CVE-2020-10011

 

Published at: - 08-12-2020 09:15

Last modified: - 14-10-2022 04:23

Total changes: - 2

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://support.apple.com/en-us/HT211929
• https://support.apple.com/en-us/HT211849
• https://support.apple.com/kb/HT211931
• 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1-Mailing List, Third Party Advisory
• https://support.apple.com/kb/HT211930

 

Keywords

NVD

 

CVE-2020-10011

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures