Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability in Mail Processing

A vulnerability allowing out-of-bounds write operations has been identified in the Mail application across multiple Apple operating systems, including iOS 13.5, iPadOS 13.5, iOS 12.4.7, and watchOS 6.2.5. This vulnerability arises from insufficient bounds checking, which can be exploited by processing maliciously crafted mail messages. The exploitation of this vulnerability may lead to unexpected modifications in memory, application crashes, or heap corruption.

Impact

Exploitation of this vulnerability can cause unexpected memory modifications, application terminations, or heap corruption, potentially leading to arbitrary code execution.

Remediation

Users can update to iOS 13.5, iPadOS 13.5, or watchOS 6.2.5 to address this vulnerability.