CVE-2020-9818

HIGH KEV

Apple Ipados < 13.5 - Out-of-Bounds Write

Title source: rule

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.

References (4)

[Release Notes, Vendor Advisory] https://support.apple.com/HT211168

[Release Notes, Vendor Advisory] https://support.apple.com/HT211169

[Release Notes, Vendor Advisory] https://support.apple.com/HT211175

[US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9818

Scores

CVSS v3 8.8

EPSS 0.0087

EPSS Percentile 75.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03

VulnCheck KEV 2020-04-22

InTheWild.io 2021-07-23

ENISA EUVD EUVD-2020-30597

CWE

CWE-787

Status published

Products (3)

apple/ipados < 13.5

apple/iphone_os < 12.4.7

apple/watchos < 6.2.5

Published Jun 09, 2020

KEV Added Nov 03, 2021

Tracked Since Feb 18, 2026