2020 CVE Vulnerabilities
21,086 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-25675 | LOW | 3.3 | 1.1% | Dec 8, 2020 | In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconst... |
| CVE-2020-25674 | MEDIUM | 5.5 | 1.0% | Dec 8, 2020 | WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an ou... |
| CVE-2020-27950 | MEDIUM | 5.5 | 16.5% | Dec 8, 2020 | A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watch... |
| CVE-2020-27932 | HIGH | 7.8 | 10.3% | Dec 8, 2020 | A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS ... |
| CVE-2020-27930 | HIGH | 7.8 | 22.2% | Dec 8, 2020 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, wat... |
| CVE-2020-27929 | MEDIUM | 5.5 | 0.6% | Dec 8, 2020 | A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. T... |
| CVE-2020-27927 | HIGH | 7.8 | 1.3% | Dec 8, 2020 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.0.1, i... |
| CVE-2020-27926 | HIGH | 7.8 | 1.1% | Dec 8, 2020 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. P... |
| CVE-2020-27925 | MEDIUM | 5.5 | 0.3% | Dec 8, 2020 | An issue existed in the handling of incoming calls. The issue was addressed with additional state checks. This issue is ... |
| CVE-2020-27917 | HIGH | 7.8 | 1.7% | Dec 8, 2020 | A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watch... |
| CVE-2020-27916 | HIGH | 7.8 | 1.6% | Dec 8, 2020 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14... |
| CVE-2020-27912 | HIGH | 7.8 | 1.8% | Dec 8, 2020 | An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO... |
| CVE-2020-27911 | HIGH | 7.8 | 3.2% | Dec 8, 2020 | An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchO... |
| CVE-2020-27910 | HIGH | 7.8 | 1.6% | Dec 8, 2020 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.... |
| CVE-2020-27909 | HIGH | 7.8 | 2.1% | Dec 8, 2020 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvO... |
| CVE-2020-27906 | HIGH | 8.8 | 2.9% | Dec 8, 2020 | Multiple integer overflows were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A... |
| CVE-2020-27905 | HIGH | 7.8 | 1.3% | Dec 8, 2020 | A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2,... |
| CVE-2020-27904 | HIGH | 7.8 | 3.1% | Dec 8, 2020 | A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is f... |
| CVE-2020-27903 | HIGH | 7.8 | 1.2% | Dec 8, 2020 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.0.1. An application ma... |
| CVE-2020-27902 | MEDIUM | 4.6 | 0.3% | Dec 8, 2020 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A... |
| CVE-2020-27900 | MEDIUM | 5.5 | 0.9% | Dec 8, 2020 | An issue existed in the handling of snapshots. The issue was resolved with improved permissions logic. This issue is fix... |
| CVE-2020-27898 | MEDIUM | 5.5 | 1.0% | Dec 8, 2020 | A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1. An at... |
| CVE-2020-27895 | LOW | 3.3 | 0.6% | Dec 8, 2020 | An information disclosure issue existed in the transition of program state. This issue was addressed with improved state... |
| CVE-2020-25667 | MEDIUM | 5.5 | 1.2% | Dec 8, 2020 | TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:for... |
| CVE-2020-25666 | LOW | 3.3 | 1.2% | Dec 8, 2020 | There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple m... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now