CVE-2020-27942

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing a maliciously crafted font file may lead to arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
AppleSecurity Update - Catalina>= unspecified, < 2021

References

Timeline

Published
Sep 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-279437.8A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fiCVE-2020-279447.8A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fiCVE-2020-279457.8An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 CataliCVE-2020-279465.5An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, SecuriCVE-2020-279477.8A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 CVE-2020-279487.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security UCVE-2020-279495.5This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Big Sur 11.1, Security Update 20CVE-2020-27956.3Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affeCVE-2020-279505.5A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security UCVE-2020-279517.8This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. UnauthorCVE-2020-279527.8An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 CatCVE-2020-279559.8Git LFS 2.12.0 allows Remote Code Execution.
CVE-2020-27942: High severity, CVSS 7.8 | Vulnix