CVE-2020-9818
CVE-2020-9818
In short
A flaw in Apple's mail app allows maliciously crafted emails to write data beyond memory boundaries, potentially causing the app to crash or allowing attackers to modify system memory without proper authorization.
Technical detail
An out-of-bounds write vulnerability in iOS/iPadOS mail processing fails to properly validate buffer bounds when parsing specially crafted mail messages, allowing local or remote attackers to achieve arbitrary memory modification or denial of service via a malicious email attachment or content.
Summary generated and translated by AI from the official description.
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →