CVE:CVE-2020-29618
CNNVD:CNNVD-202012-1078
Apple ImageIO是美国Apple公司的一个用于IOS移动设备中对图像数据进行解析和写入的必要组件。
Apple ImageIO 存在安全漏洞，处理恶意制作的图像可能会导致任意代码执行。以下产品和版本受到影响：macOS Mojave 10.14.6，macOS Catalina 10.15.7，macOS Big Sur 11.0.1
solution:Upgrade apple icloud to a higher version than 12.0,and avoid the version (,12.0); Upgrade apple ipados to a higher version than 14.3,and avoid the version (,14.3); Upgrade apple iphone_os to a higher version than 14.3,and avoid the version (,14.3); Upgrade apple mac_os_x to a higher version than 10.14.6,10.15.7,10.14.6,10.14.6:security_update_2019-004,10.14.6:security_update_2019-005,10.14.6:security_update_2019-006,10.14.6:security_update_2019-007,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:supplemental_update,10.14.6:supplemental_update_2,10.15.7,10.15.7:supplemental_update,and avoid the version [10.14,10.14.6),[10.15,10.15.7),10.14.6,10.14.6:security_update_2019-004,10.14.6:security_update_2019-005,10.14.6:security_update_2019-006,10.14.6:security_update_2019-007,10.14.6:security_update_2020-001,10.14.6:security_update_2020-002,10.14.6:security_update_2020-003,10.14.6:security_update_2020-004,10.14.6:security_update_2020-005,10.14.6:security_update_2020-006,10.14.6:supplemental_update,10.14.6:supplemental_update_2,10.15.7,10.15.7:supplemental_update; Upgrade apple macos to a higher version than 11.1.0,and avoid the version [11.0,11.1.0); Upgrade apple tvos to a higher version than 14.3,and avoid the version (,14.3); Upgrade apple watchos to a higher version than 7.2,and avoid the version (,7.2)