This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Security Update - Catalina
Vendor
Apple
Product
Security Update - Catalina
Platforms
Unknown
Default status
Unknown
Security Update - Catalina · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
2021
Unavailable
None listed
iOS and iPadOS
Vendor
Apple
Product
iOS and iPadOS
Platforms
Unknown
Default status
Unknown
iOS and iPadOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
15
Unavailable
None listed
tvOS
Vendor
Apple
Product
tvOS
Platforms
Unknown
Default status
Unknown
tvOS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
15
Unavailable
None listed
iTunes for Windows
Vendor
Apple
Product
iTunes for Windows
Platforms
Unknown
Default status
Unknown
iTunes for Windows · Scoped product and version facts