CVE-2020-36521

An out-of-bounds read was addressed with improved input validation

High · published September 23, 2022

CVSS v3.1
7.1
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00444 · 37.6th percentile
Published
2022-09-23T18:58Z
EPSS history
Timeline
  • 23 SEP 18:58Z
    An out-of-bounds read was addressed with improved input validation
    cvelistv5