{"id":"CVE-2020-9907","kind":"vulnerability","aliases":["CVE-2020-9907"],"related":[],"title":"A memory corruption issue was addressed by removing the vulnerable code","description":"A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An application may be able to execute arbitrary code with kernel privileges.","summary":"Apple iOS, iPadOS and tvOS have a memory corruption bug in a component that a regular app can reach. A malicious app can run code with kernel privileges, which means full control of the device.","severity":"critical","cvss":9.3,"epss":0.03199,"exploited":true,"exploited_at":"2022-06-27T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["13.6"],"affected":"< 13.6","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["13.6"],"affected":"< 13.6","ecosystem":"vendor"},{"name":"apple tvos","fixed":["13.4.8"],"affected":"< 13.4.8","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","ios","ipados","tvos"],"not_affected_if":["unpatched-os-not-in-use"],"how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or Settings > General > Software Update (tvOS). unknown for managed fleet tooling.","fix":"Update iOS, iPadOS and tvOS to a release Apple lists as fixed for CVE-2020-9907, per Apple's vendor instructions. Specific fixed versions: unknown from these sources.","status":"open","published_at":"2020-10-16T17:15:16+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:30+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:12:30Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, iPadOS and tvOS to a release Apple lists as fixed for CVE-2020-9907, per Apple's vendor instructions. Specific fixed versions: unknown from these sources.","reach":"local","impact":"high","summary":"Apple iOS, iPadOS and tvOS have a memory corruption bug in a component that a regular app can reach. A malicious app can run code with kernel privileges, which means full control of the device.","category":"infrastructure","who_cares":["ios","ipados","tvos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"Malicious app gains kernel privileges and full device control.","analyst_note":"Confirm the fixed iOS, iPadOS and tvOS versions and the exploit delivery path against Apple's security content page for CVE-2020-9907 (not in the sources given).","how_to_check":"Check the device OS version in Settings > General > About (iOS/iPadOS) or Settings > General > Software Update (tvOS). unknown for managed fleet tooling.","needs_analyst":true,"not_affected_if":["unpatched-os-not-in-use"],"user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.0005,"input_tokens":2829,"output_tokens":434,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2020':13A,16A '-9907':14A,17A '13.4.8':93C '13.6':88C,91C 'abl':98C 'address':6A,76C 'app':52B,57B 'appl':29B,36B 'apple':18A,21A,23A,26A 'apple-devic':28B 'applic':95C 'arbitrari':101C 'bug':45B 'code':11A,60B,81C,102C 'compon':48B 'control':67B 'corrupt':3A,44B,73C 'cve':12A,15A 'devic':30B,70B 'execut':100C 'exploit':31B 'fix':85C 'full':66B 'infrastructur':32B 'io':33B,37B,87C 'ipado':34B,38B,90C 'ipados':22A 'iphone':24A 'issu':4A,74C,83C 'kernel':62B,104C 'malici':56B 'may':96C 'mean':65B 'memori':2A,43B,72C 'multiple':19A 'os':25A 'privileg':63B,105C 'products':20A 'reach':54B 'regular':51B 'remov':8A,78C 'run':59B 'tvos':27A,35B,40B,92C 'vulner':10A,80C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-10-16T17:15:16+00:00","kev":{"dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-9907","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-9907","severity":null,"published_at":"2022-06-27T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T11:39:16+00:00","note":null},{"source":"epss","external_id":"CVE-2020-9907","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-9907","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-9907","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9907","severity":null,"published_at":"2020-10-16T17:15:16+00:00","modified_at":"2026-06-17T03:28:47+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}