Back to CVE Browser

CVE-2020-9818

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score39.7150%

EPSS Percentile95.33th

PublishedJun 9, 2020

Last ModifiedOct 23, 2025

Vulnerability Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.

Affected Platforms (CPE)

💻

Apple

Ipados

< 13.5

💻

Apple

Iphone Os

< 12.4.7

💻

Apple

Iphone Os

>= 13.0 and < 13.5

💻

Apple

Watchos

< 6.2.5

References & Advisories

🔗 https://support.apple.com/HT211168

🔗 https://support.apple.com/HT211169

🔗 https://support.apple.com/HT211175

🔗 https://support.apple.com/HT211168

🔗 https://support.apple.com/HT211169

🔗 https://support.apple.com/HT211175

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-9818

Related Vulnerabilities

CVE-2019-877910.0

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions...

CVE-2020-39109.8

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39099.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39119.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....