Not rated
CVE-2020-27909 An out-of-bounds read was addressed with improved input validation
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| watchOS 7.1 | earliest → < 7.1 | 7.1 |
| iOS and iPadOS 14.2 | earliest → < 14.2 | 14.2 |
| tvOS 14.2 | earliest → < 14.2 | 14.2 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 seclists.org
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of watchOS
The 1458 CVEs of watchOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium
CVE-2026-112682
An input validation issue was addressed with improved input validation
7.5
High