CVE-2020-27925

MEDIUM

iPadOS < 14.2 - Unintended Call Handling via State Management Issue

Title source: llm
STIX 2.1

Description

An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is fixed in iOS 14.2 and iPadOS 14.2. A user may answer two calls simultaneously without indication they have answered a second call.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT211929

Scores

CVSS v3 5.5
EPSS 0.0027
EPSS Percentile 18.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

Status published
Products (2)
apple/ipados < 14.2
apple/iphone_os < 14.2
Published Dec 08, 2020
Tracked Since Feb 18, 2026