CVE-2020-9841

Se abordó un desbordamiento de enteros por medio de una comprobación de entrada mejorada. Este problema es corregido en macOS Catalina versión 10.15.5. Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel

This vulnerability allows local attackers to escalate privileges on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the SkyLight module. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of WindowServer.

macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra are now available and address bypass, code execution, denial of service, double free, information leakage, integer overflow, out of bounds read, out of bounds write, and use-after-free vulnerabilities.