Actively exploited in the wild
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability
Apple - iOS, iPadOS, and watchOS · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2020-9819
MediumCVSS 4.3KEVSummary
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
Risk Assessment
An attacker can remotely trigger memory corruption, potentially leading to code execution or device crash.
Recommendation
Update iOS, iPadOS, and watchOS to the latest patched versions.
Other vulnerabilities in iOS, iPadOS, watchOS
Original NVD description (English source)
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.