CVE-2020-27952

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. Processing a maliciously crafted font file may lead to arbitrary code execution.

• CWE-787

• https://support.apple.com/en-us/HT211931Vendor Advisory
• https://support.apple.com/en-us/HT212011Vendor Advisory
• https://support.apple.com/en-us/HT211931Vendor Advisory
• https://support.apple.com/en-us/HT212011Vendor Advisory

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-27947A memory corruption issue was addressed with improved input …7.8
• CVE-2020-27948An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2020-27949This issue was addressed with improved checks to prevent una…5.5
• CVE-2020-2795Vulnerability in the Oracle Knowledge product of Oracle Know…6.3
• CVE-2020-27950A memory initialization issue was addressed. This issue is f…5.5
• CVE-2020-27951This issue was addressed with improved checks. This issue is…7.8
• CVE-2020-27955Git LFS 2.12.0 allows Remote Code Execution.9.8
• CVE-2020-27956An Arbitrary File Upload in the Upload Image component in So…9.8
• CVE-2020-27957The RandomGameUnit extension for MediaWiki through 1.35 was …5.4
• CVE-2020-27958The Job Composer app in Ohio Supercomputer Center Open OnDem…4.3
• CVE-2020-2796Vulnerability in the Oracle Email Center product of Oracle E…8.2
• CVE-2020-27969Yandex Browser for Android 20.8.4 allows remote attackers to…7.3