CVE-2020-9819
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability is confirmed as actively exploited and is listed in the CISA KEV catalog.
Required action
Apply updates per vendor instructions.
CISA notes
https://nvd.nist.gov/vuln/detail/CVE-2020-9819
Description
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitation Context
as of October 14, 2026- CISA added CVE-2020-9819 to the KEV catalog 512 days after its CVE record was published.
- It is one of 95 Apple entries in the CISA KEV catalog, and one of 23 added in 2021.
- Its current EPSS score (2.2%) is higher than that of 9% of CISA KEV entries.
Affected Products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Apple iOS | unspecified to <iOS 13.5 and iPadOS 13.5 |
| Apple | Apple iOS-1 | unspecified to <iOS 12.4.7 |
| Apple | Apple watchOS | unspecified to <watchOS 6.2.5 |
| Apple | Apple watchOS-1 | unspecified to <watchOS 5.3.7 |
References
4 LinksRecord Details
More from Apple
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability
Apple Multiple Products Integer Overflow Vulnerability
CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.