Security Vulnerabilities fixed in iTunes HT211293

Description

An out-of-bounds write issue was addressed with improved bounds checking. An out-of-bounds read was addressed with improved input validation. A buffer overflow issue was addressed with improved memory handling. An out-of-bounds write issue was addressed with improved bounds checking. An out-of-bounds read was addressed with improved bounds checking. An integer overflow was addressed through improved input validation. An out-of-bounds read was addressed with improved input validation. An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. A logic issue was addressed with improved state management. A use after free issue was addressed with improved memory management. Multiple issues were addressed with improved logic. A URL Unicode encoding issue was addressed with improved state management. A command injection issue existed in Web Inspector. This issue was addressed with improved escaping. An out-of-bounds write issue was addressed with improved bounds checking. An out-of-bounds read was addressed with improved input validation. A buffer overflow issue was addressed with improved memory handling. An out-of-bounds write issue was addressed with improved bounds checking. An out-of-bounds read was addressed with improved bounds checking. An integer overflow was addressed through improved input validation. An out-of-bounds read was addressed with improved input validation. An access issue existed in Content Security Policy. This issue was addressed with improved access restrictions. A logic issue was addressed with improved state management. A use after free issue was addressed with improved memory management. Multiple issues were addressed with improved logic. A URL Unicode encoding issue was addressed with improved state management. A command injection issue existed in Web Inspector. This issue was addressed with improved escaping.

Affected Applications

iTunes

CVE References

CVE-2020-9871 CVE-2020-9872 CVE-2020-9874 CVE-2020-9879 CVE-2020-9936 CVE-2020-9937 CVE-2020-9873 CVE-2020-9938 CVE-2020-9919 CVE-2020-9877 CVE-2020-9875 CVE-2020-9894 CVE-2020-9915 CVE-2020-9925 CVE-2020-9893 CVE-2020-9895 CVE-2020-9910 CVE-2020-9916 CVE-2020-9862

Other References

https://support.apple.com/en-us/HT211293