Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27873 State: PUBLISHED Published: 2021-02-04T16:45:18 Last Updated: 2024-08-04T16:25:43.706Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: NETGEAR Products: R7450 Problem Types: CWE-284 Description: This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R7450 1.2.0.62_1.0.1 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SOAP API endpoint, which listens on TCP port 80 by default. The issue results from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, le
s from the lack of proper access control. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11559. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062641/Security-Advisory-for-Password-Recovery-Vulnerabilities-on-Some-Routers - https://www.zerodayinitiative.com/advisories/ZDI-21-072/
CVE ID: CVE-2020-27874 State: PUBLISHED Published: 2021-02-10T22:15:17 Last Updated: 2024-08-04T16:25:43.291Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Tencent Products: WeChat Problem Types: CWE-119 Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated objec
lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11580. Additional Analyst Notes: - CVE Program Container: References: - https://www.zerodayinitiative.com/advisories/ZDI-21-084/
CVE ID: CVE-2020-27885 State: PUBLISHED Published: 2020-10-29T20:14:42 Last Updated: 2024-08-04T16:25:43.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability on WSO2 API Manager 3.1.0. By exploiting a Cross-site scripting vulnerability the attacker can hijack a logged-in user’s session by stealing cookies which means that a malicious hacker can change the logged-in user’s password and invalidate the session of the victim while the hacker maintains access. Additional Analyst Notes: - CVE Program Container: References: - https://docs.wso2.com/display/Security/2020+Advisories - https://www.rodrigofavarini.com.br/cybersecurity/multiple-xss-on-a
ps://docs.wso2.com/display/Security/2020+Advisories - https://www.rodrigofavarini.com.br/cybersecurity/multiple-xss-on-api-manager-3-1-0/
CVE ID: CVE-2020-27886 State: PUBLISHED Published: 2020-10-29T18:24:54 Last Updated: 2024-08-04T16:25:43.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork eonweb 5.3-7 through 5.3-8. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to exploit the username_available function of the includes/functions.php file (which is called by login.php). Additional Analyst Notes: - CVE Program Container: References: - https://www.eyesofnetwork.com/en - http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso - https://github.com/EyesOfNetworkCommunity/eonweb/issues/76
CVE ID: CVE-2020-27887 State: PUBLISHED Published: 2020-10-29T18:26:48 Last Updated: 2024-08-04T16:25:43.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in EyesOfNetwork 5.3 through 5.3-8. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the nmap_binary parameter to lilac/autodiscovery.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.eyesofnetwork.com/en - http://download.eyesofnetwork.com/EyesOfNetwork-5.3-x86_64-bin.iso - https://github.com/EyesOfNetworkCommunity/eonweb/issues/76
CVE ID: CVE-2020-27888 State: PUBLISHED Published: 2020-10-27T19:25:31 Last Updated: 2024-08-04T16:25:43.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Ubiquiti UniFi Meshing Access Point UAP-AC-M 4.3.21.11325 and UniFi Controller 6.0.28 devices. Cached credentials are not erased from an access point returning wirelessly from a disconnected state. This may provide unintended network access. Additional Analyst Notes: - CVE Program Container: References: - https://community.ui.com/questions/Possible-authentication-bypass-for-access-into-LAN/7965adb2-5d70-4410-8467-4c7bec76bc00
CVE ID: CVE-2020-27890 State: PUBLISHED Published: 2020-10-27T20:26:11 Last Updated: 2024-08-04T16:25:43.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Write Attributes No Response message. It crashes in zclParseInWriteCmd() and does not update the specific attribute's value. Additional Analyst Notes: - CVE Program Container: References: - https://www.ti.com/tool/Z-STACK - https://github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities
CVE ID: CVE-2020-27891 State: PUBLISHED Published: 2020-10-27T20:26:01 Last Updated: 2024-08-04T16:25:43.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Read Reporting Configuration Response message. It crashes in zclHandleExternal(). Additional Analyst Notes: - CVE Program Container: References: - https://www.ti.com/tool/Z-STACK - https://github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities
CVE ID: CVE-2020-27892 State: PUBLISHED Published: 2020-10-27T20:25:48 Last Updated: 2024-08-04T16:25:43.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zigbee protocol implementation on Texas Instruments CC2538 devices with Z-Stack 3.0.1 does not properly process a ZCL Discover Commands Received Response message or a ZCL Discover Commands Generated Response message. It crashes in zclParseInDiscCmdsRspCmd(). Additional Analyst Notes: - CVE Program Container: References: - https://www.ti.com/tool/Z-STACK - https://github.com/zigbeeprotocol/Z-Fuzzer/tree/master/vulnerabilities
CVE ID: CVE-2020-27893 State: PUBLISHED Published: 2021-04-02T17:27:37 Last Updated: 2024-08-04T16:25:43.709Z Vendors: Apple Products: macOS Problem Types: A user with screen sharing access may be able to view another user's screen Description: An issue existed in screen sharing. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A user with screen sharing access may be able to view another user's screen. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931
CVE ID: CVE-2020-27894 State: PUBLISHED Published: 2020-12-08T20:04:17 Last Updated: 2024-08-04T16:25:43.772Z Vendors: Apple Products: macOS Problem Types: Users may be unable to remove metadata indicating where files were downloaded from Description: The issue was addressed with additional user controls. This issue is fixed in macOS Big Sur 11.0.1. Users may be unable to remove metadata indicating where files were downloaded from. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-27895 State: PUBLISHED Published: 2020-12-08T20:06:07 Last Updated: 2024-08-04T16:25:43.597Z Vendors: Apple Products: iTunes for Windows Problem Types: A malicious application may be able to access local users Apple IDs Description: An information disclosure issue existed in the transition of program state. This issue was addressed with improved state handling. This issue is fixed in iTunes 12.11 for Windows. A malicious application may be able to access local users Apple IDs. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211933
CVE ID: CVE-2020-27896 State: PUBLISHED Published: 2020-12-08T21:11:29 Last Updated: 2024-08-04T16:25:43.783Z Vendors: Apple Products: macOS Problem Types: A remote attacker may be able to modify the file system Description: A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to modify the file system. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27897 State: PUBLISHED Published: 2021-04-02T17:26:02 Last Updated: 2024-08-04T16:25:43.651Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011 - https://www.zerodayi
References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011 - https://www.zerodayinitiative.com/advisories/ZDI-21-486/
CVE ID: CVE-2020-27898 State: PUBLISHED Published: 2020-12-08T20:07:45 Last Updated: 2024-08-04T16:25:43.911Z Vendors: Apple Products: macOS Problem Types: An attacker may be able to bypass Managed Frame Protection Description: A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An attacker may be able to bypass Managed Frame Protection. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27899 State: PUBLISHED Published: 2021-04-02T17:27:58 Last Updated: 2024-08-04T16:25:43.673Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: A local attacker may be able to elevate their privileges Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, tvOS 14.2. A local attacker may be able to elevate their privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/
11931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930
CVE ID: CVE-2020-27900 State: PUBLISHED Published: 2020-12-08T20:06:59 Last Updated: 2024-08-04T16:25:43.802Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to preview files it does not have access to Description: An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to preview files it does not have access to. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32
CVE ID: CVE-2020-27901 State: PUBLISHED Published: 2021-04-02T17:29:46 Last Updated: 2024-08-04T16:25:44.103Z Vendors: Apple Products: macOS Problem Types: A sandboxed process may be able to circumvent sandbox restrictions Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A sandboxed process may be able to circumvent sandbox restrictions. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27902 State: PUBLISHED Published: 2020-12-08T20:08:33 Last Updated: 2024-08-04T16:25:43.788Z Vendors: Apple Products: iOS and iPadOS Problem Types: A person with physical access to an iOS device may be able to access stored passwords without authentication Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS device may be able to access stored passwords without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211929
CVE ID: CVE-2020-27903 State: PUBLISHED Published: 2020-12-08T20:07:17 Last Updated: 2024-08-04T16:25:44.107Z Vendors: Apple Products: macOS Problem Types: An application may be able to gain elevated privileges Description: This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to gain elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27904 State: PUBLISHED Published: 2020-12-08T20:07:35 Last Updated: 2024-08-04T16:25:43.780Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclos
http://seclists.org/fulldisclosure/2020/Dec/32 - https://support.apple.com/kb/HT212147 - http://seclists.org/fulldisclosure/2021/Feb/14
CVE ID: CVE-2020-27905 State: PUBLISHED Published: 2020-12-08T20:09:08 Last Updated: 2024-08-04T16:25:43.624Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS Problem Types: A malicious application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930
CVE ID: CVE-2020-27906 State: PUBLISHED Published: 2020-12-08T20:08:45 Last Updated: 2024-08-04T16:25:43.973Z Vendors: Apple Products: macOS Problem Types: A remote attacker may be able to cause unexpected application termination or heap corruption Description: Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A remote attacker may be able to cause unexpected application termination or heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisc
- https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27907 State: PUBLISHED Published: 2021-04-02T17:28:33 Last Updated: 2024-08-04T16:25:43.895Z Vendors: Apple Products: macOS Problem Types: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27908 State: PUBLISHED Published: 2021-04-02T17:31:07 Last Updated: 2024-08-04T16:25:43.967Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple
lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27909 State: PUBLISHED Published: 2020-12-08T20:09:47 Last Updated: 2024-08-04T16:25:43.802Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/kb/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://supp
ple.com/kb/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - http://seclists.org/fulldisclosure/2020/Dec/32 - https://www.zerodayinitiative.com/advisories/ZDI-21-374/
CVE ID: CVE-2020-27910 State: PUBLISHED Published: 2020-12-08T20:09:27 Last Updated: 2024-08-04T16:25:43.957Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.c
erences: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27911 State: PUBLISHED Published: 2020-12-08T20:10:22 Last Updated: 2024-08-04T16:25:43.939Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support
ermination or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211935 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/en-us/HT211933 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27912 State: PUBLISHED Published: 2020-12-08T20:10:05 Last Updated: 2024-08-04T16:25:43.896Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.co
nalyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211935 - https://support.apple.com/en-us/HT211928 - https://support.apple.com/en-us/HT211929 - https://support.apple.com/en-us/HT211930 - https://support.apple.com/en-us/HT211933 - https://support.apple.com/kb/HT212011 - http://seclists.org/fulldisclosure/2020/Dec/32 - http://seclists.org/fulldisclosure/2020/Dec/26
CVE ID: CVE-2020-27914 State: PUBLISHED Published: 2021-04-02T17:30:49 Last Updated: 2024-08-04T16:25:44.185Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27915 State: PUBLISHED Published: 2021-04-02T17:30:28 Last Updated: 2024-08-04T16:25:43.917Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-27916 State: PUBLISHED Published: 2020-12-08T20:12:04 Last Updated: 2024-08-04T16:25:43.987Z Vendors: Apple Products: watchOS, iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931 - https://support.apple.com/en-us/HT211928 - https://support.apple.