CVE-2020-29639: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font may result in the disclosure of process memory.

Affected products

• Apple iPadOS: before 14.0 (fixed in 14.0)
• Apple iPhone OS: before 14.0 (fixed in 14.0)

Published 2021-04-02. Last modified 2026-06-17.