Files
CVEs-PoC/2020/CVE-2020-9976.md
T
2024-06-18 02:51:15 +02:00

22 lines
1.1 KiB
Markdown

### [CVE-2020-9976](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9976)
![](https://img.shields.io/static/v1?label=Product&message=iOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=tvOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=watchOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20iOS%2014.0%20and%20iPadOS%2014.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20tvOS%2014.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20watchOS%207.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=A%20malicious%20application%20may%20be%20able%20to%20leak%20sensitive%20user%20information&color=brighgreen)
### Description
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0, tvOS 14.0, watchOS 7.0. A malicious application may be able to leak sensitive user information.
### POC
#### Reference
- http://seclists.org/fulldisclosure/2020/Nov/19
#### Github
No PoCs found on GitHub currently.