Exploitation Summary
CVE-2020-9802 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 2 public exploits from researchers including Billy-Ellis, khcujw.
AI-analyzed exploit summary This repository provides a high-level explanation and references for an iOS browser exploit targeting CVE-2020-9802, a JIT compiler bug in WebKit. It includes credits to prior research and a video explanation but lacks detailed technical analysis or functional exploit code.
Description
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.
Exploits (2)
This repository provides a high-level explanation and references for an iOS browser exploit targeting CVE-2020-9802, a JIT compiler bug in WebKit. It includes credits to prior research and a video explanation but lacks detailed technical analysis or functional exploit code.
This repository contains a functional exploit for CVE-2020-9802, a WebKit JavaScriptCore vulnerability. The exploit leverages a compiler bug in integer range optimization to achieve arbitrary memory read/write, leading to remote code execution.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H