← Back to browse · API

CVE-2020-9818

Severity
HIGH
CVSS
8.8
EPSS
0.02286
Risk score
61.0
CISA KEV
Yes
PoC
No
Published
2020-06-09
Modified
2025-12-20
First seen
2026-08-07
Aliases
EUVD-2020-30597, GHSA-R647-89QJ-XWMP
Products
Apple:iOS, iPadOS, and watchOS, Apple:iOS-1 unspecified <iOS 12.4.7, Apple:watchOS unspecified <watchOS 6.2.5, Cisco:IOS unspecified <iOS 13.5 and iPadOS 13.5
Sources
cisa.gov CVE-2020-9818
euvd EUVD-2020-30597

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination.

References