CVE-2020-9964

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory.

Affected

Apple · iOS

CVSS v3.1 NVD

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

4.9 MEDIUMAV:L/AC:L/Au:N/C:C/I:N/A:N

EPSS

0.41% chance of exploitation in the next 30 days, 33rd percentile

Published

2020-10-16

Updated

2024-08-04

Proof-of-concept exploits (1)

• 0x36/oob_events186★ · 2020-11-27

Security advisories

• https://support.apple.com/HT211850
• http://seclists.org/fulldisclosure/2020/Nov/20

References

• CVE Record
• NVD entry

Related

• CVE-2020-27905
• CVE-2022-32845
• CVE-2022-32899
• CVE-2022-32948
• CVE-2022-42805
• CVE-2023-26083