CVE-2020-36521

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Sep 23, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-365235.4A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database In CVE-2020-365245.4A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the CVE-2020-365255.4A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The ma CVE-2020-365265.4A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handl CVE-2020-365275.4A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the com CVE-2020-365286.5A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to br CVE-2020-365298.8A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.p CVE-2020-36539.1Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon C CVE-2020-365308.8A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Su CVE-2020-365318.8A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the CVE-2020-365326.5A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authoriz CVE-2020-365339.8A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handl