Vulnerabilities

TI-2020-16986 CVE-2020-27931 · GHSA-72r6-qv32-4jvm

Out-of-bounds write in Apple tvOS

LOW 36

A memory corruption issue existed in the processing of font files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0103 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-787

TI-2020-08045 CVE-2020-9975 · GHSA-3fxq-93m7-p4qm

LOW 36

A use after free issue was addressed with improved memory management.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01159 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-416

TI-2020-08048 CVE-2020-9978 · GHSA-5hfq-49hj-vmf5

LOW 22

This issue was addressed with improved setting propagation.

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.00539 Published 2021-04-02 Fixed in 14.0, 7.0 +2

TI-2020-08028 CVE-2020-9956 · GHSA-6jx5-mjmq-jpmv

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01079 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-125

TI-2020-08041 CVE-2020-9971 · GHSA-w445-c7r5-4m2m

LOW 36

A logic issue was addressed with improved validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01125 Published 2021-04-02 Fixed in 14.0, 7.0 +1

TI-2020-08038 CVE-2020-9967 · GHSA-346j-g3cg-vw5q

LOW 39

Multiple memory corruption issues were addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02323 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-787

TI-2020-08033 CVE-2020-9962 · GHSA-5qwf-wq7h-gm7g

LOW 37

A buffer overflow was addressed with improved size validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0122 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-120

TI-2020-08027 CVE-2020-9955 · GHSA-3v9q-g2fg-6vm7

LOW 36

An out-of-bounds write issue was addressed with improved bounds checking.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01051 Published 2021-04-02 Fixed in 14.0, 7.0 +1 CWE-787

TI-2020-08031 CVE-2020-9960 · GHSA-84r9-r5cm-m4q8

LOW 36

An out-of-bounds read was addressed with improved input validation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01079 Published 2021-04-02 Fixed in 14.0, 7.0 +2 CWE-125