TI-2020-16994 Aliases CVE-2020-27940 GHSA-82p8-66pg-8588

Apple TV app for Fire OS: An attacker with file system access may modify scripts used by…

LOW 21Published 2021-09-08 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

This issue was addressed with improved file handling. This issue is fixed in Apple TV app for Fire OS 6.1.0.6A142:7.1.0. An attacker with file system access may modify scripts used by the app.

Why it matters now

EPSS 0.00754 55th percentileScored 2026-11-07

Fix Fixed Apple TV app for Fire OS (Apple): 6.1.0.6A142:7.1.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Apple	Apple TV app for Fire OS	before 6.1.0.6A142:7.1.0	6.1.0.6A142:7.1.0	Patch available	CNA

Apple TV app for Fire OS VendorApple Affected before 6.1.0.6A142:7.1.0 Fixed in 6.1.0.6A142:7.1.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:apple:apple_tv::::::fire_os::*	before 5.1	Vulnerable	Apple

cpe:2.3:o:apple:apple_tv:*:*:*:*:*:fire_os:*:* Versions before 5.1 Vulnerable ·Apple

Remediation

Fix · CNA Apple TV app for Fire OS (Apple) Fixed in 6.1.0.6A142:7.1.0

Timeline

2026-10-02 Threatist record created from CVE-2020-27940
2026-10-03 Alias added: GHSA-82p8-66pg-8588

References

Advisory 1

https://support.apple.com/en-us/HT212197

TI-2018-03197 Memory corruption in Apple Kernel CVSS 3.0HIGH 7.8
TI-2018-03047 Memory corruption in Apple WebKit CVSS 3.0HIGH 8.8
TI-2017-01643 Memory corruption in Apple WebKit CVSS 3.0HIGH 8.8
TI-2018-03248 In macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update… CVSS 3.0CRITICAL 9.8
TI-2018-03195 Memory corruption in Apple Kernel CVSS 3.0HIGH 7.8
TI-2018-03144 In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra… CVSS 3.0CRITICAL 9.8

See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences