Apple tvOS Model IO Remote Code Execution

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Apple tvOS (Digital Media Player) (affected version not known). It has been rated as critical. Affected by this issue is an unknown function of the component Model IO. Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Field04/03/2021 10:33 AM04/08/2021 02:18 PM
vendorAppleApple
nametvOStvOS
componentModel IOModel IO
cvss3_vuldb_avNN
cvss3_vuldb_acLL
cvss3_vuldb_prNN
cvss3_vuldb_uiRR
cvss3_vuldb_sUU
cvss3_vuldb_cLL
cvss3_vuldb_iLL
cvss3_vuldb_aLL
cvss3_vuldb_eXX
cvss3_vuldb_rlOO
cvss3_vuldb_rcCC
cvss2_vuldb_avNN
cvss2_vuldb_acLL
cvss2_vuldb_auNN
cvss2_vuldb_ciPP
cvss2_vuldb_iiPP
cvss2_vuldb_aiPP
cvss2_vuldb_eNDND
cvss2_vuldb_rlOFOF
cvss2_vuldb_rcCC
date1612134000 (02/01/2021)1612134000 (02/01/2021)
locationWebsiteWebsite
typeAdvisoryAdvisory
person_nameZhiWei SunZhiWei Sun
disputed00
nameUpgradeUpgrade
date1612134000 (02/01/2021)1612134000 (02/01/2021)
cveCVE-2020-29614CVE-2020-29614
cve_assigned16073820001607382000
cve_nvd_summaryThis issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted file may lead to heap corruption.
typeDigital Media Player
cvss2_vuldb_basescore7.5
cvss2_vuldb_tempscore6.5
cvss3_vuldb_basescore6.3
cvss3_vuldb_tempscore6.0
cvss3_meta_basescore6.3
cvss3_meta_tempscore6.0
price_0day$5k-$25k

◂ PreviousOverviewNext ▸

Do you know our Splunk app?

Download it now for free!