CVE-2020-9818: high-severity vulnerability in Apple iOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in Apple's mail app allows maliciously crafted emails to write data beyond memory boundaries, potentially causing the app to crash or allowing attackers to modify system memory without proper authorization.
An out-of-bounds write vulnerability in iOS/iPadOS mail processing fails to properly validate buffer bounds when parsing specially crafted mail messages, allowing local or remote attackers to achieve arbitrary memory modification or denial of service via a malicious email attachment or content.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.