A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
macOS
Vendor
Apple
Product
macOS
Platforms
Unknown
Default status
Unknown
macOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
macOS Catalina 10.15
Unavailable
None listed
tvOS
Vendor
Apple
Product
tvOS
Platforms
Unknown
Default status
Unknown
tvOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
tvOS 13
Unavailable
None listed
iTunes for Windows
Vendor
Apple
Product
iTunes for Windows
Platforms
Unknown
Default status
Unknown
iTunes for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iTunes for Windows 12.10.1
Unavailable
None listed
iCloud for Windows
Vendor
Apple
Product
iCloud for Windows
Platforms
Unknown
Default status
Unknown
iCloud for Windows · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
iCloud for Windows 10.7
Unavailable
None listed
iCloud for Windows (Legacy)
Vendor
Apple
Product
iCloud for Windows (Legacy)
Platforms
Unknown
Default status
Unknown
iCloud for Windows (Legacy) · Scoped product and version facts