An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1. An application may be able to execute arbitrary code with kernel privileges.
No PoCs from references.
- https://github.com/alphaSeclab/sec-daily-2020
- https://github.com/houjingyi233/macOS-iOS-system-security