Files
CVEs-PoC/2020/CVE-2020-9816.md
T
2024-05-25 21:48:12 +02:00

25 lines
1.5 KiB
Markdown

### [CVE-2020-9816](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9816)
![](https://img.shields.io/static/v1?label=Product&message=iOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=macOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=tvOS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=watchOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20iOS%2013.5%20and%20iPadOS%2013.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20macOS%20Catalina%2010.15.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20tvOS%2013.4.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%20watchOS%206.2.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Opening%20a%20maliciously%20crafted%20PDF%20file%20may%20lead%20to%20an%20unexpected%20application%20termination%20or%20arbitrary%20code%20execution&color=brighgreen)
### Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/0xCyberY/CVE-T4PDF
- https://github.com/ARPSyndicate/cvemon