Live › vulnerability › CVE-2020-9819
Go to dashboardApple's iOS, iPadOS and watchOS Mail app has a memory corruption bug that can corrupt heap memory when it processes a crafted email. An attacker who sends such a message can likely run code on the device, and CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Apple iOS, iPadOS, and watchOS | vendor | – | – |
Settings > General > About on the iPhone or iPad shows the iOS/iPadOS version; compare it with the fixed release in Apple's advisory.
Update iOS, iPadOS and watchOS to a release that includes Apple's fix; CISA says to apply updates per vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
This page as .md · .json · in your agent: get_signal("CVE-2020-9819")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.