Main Vulnerability Database Vulnerabilities #VU48171

Memory corruption in macOS - CVE-2020-27930

Published: November 6, 2020 / Updated: February 7, 2021

Vulnerability identifier: #VU48171

CSH Severity: Critical

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-27930

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing fonts within the FontParser component. A remote attacker can create a specially crafted document or web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note, this vulnerability is being actively exploited in the wild.

Affected software

macOS
watchOS
Apple iOS
iPadOS

How to mitigate CVE-2020-27930

Install updates from vendor's website.

macOS - update to 10.15.7 19H15
watchOS - addressed in versions 5.3.9, 6.2.9, 7.1 18R590
Apple iOS - addressed in versions 12.4.9 16H5, 14.2 18B92
iPadOS - update to 14.2 18B92

Links to Public Exploits and PoC-codes

Exploit #5129 - Apple-Safari-Remote-Code-Execution-CVE-2020-27930 (Apple Safari Remote Code Execution) (February 7, 2021)

External References

https://support.apple.com/en-us/HT211947