Not rated
CVE-2020-9979 A trust issue was addressed by removing a legacy API
Description
A trust issue was addressed by removing a legacy API. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0. An attacker may be able to misuse a trust relationship to download malicious content.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| tvOS 14.0 | earliest → < 14.0 | 14.0 |
| iOS and iPadOS 14.0 | earliest → < 14.0 | 14.0 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0 seclists.org
- 20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0 seclists.org
Timeline
- Published
- Last modified
Other CVEs of tvOS
The 1386 CVEs of tvOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium