Main Vulnerability Database Vulnerabilities #VU48173

Out-of-bounds read in macOS - CVE-2020-27950

Published: November 6, 2020 / Updated: March 23, 2021

Vulnerability identifier: #VU48173

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-27950

CWE-ID: CWE-125

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within macOS kernel. A local user can run a specially crafted program to gain access to sensitive kernel information on the system.

Note, this vulnerability is being actively exploited in the wild.

Affected software

macOS
watchOS
Apple iOS
iPadOS

How to mitigate CVE-2020-27950

Install updates from vendor's website.

macOS - update to 10.15.7 19H15
watchOS - addressed in versions 5.3.9, 6.2.9, 7.1 18R590
Apple iOS - addressed in versions 12.4.9 16H5, 14.2 18B92
iPadOS - update to 14.2 18B92

Links to Public Exploits and PoC-codes

Exploit #4897 - CVE-2020-27950 (CVE-2020-27950 exploit) (December 2, 2020)

External References

https://support.apple.com/en-us/HT211947