CVE-2020-9819: Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability

Medium severity, CVSS 4.3. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 2.2% chance of exploitation in the next 30 days.

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

Affected products

• Apple iPadOS: before 13.5 (fixed in 13.5)
• Apple iPhone OS: before 12.4.7 (fixed in 12.4.7); from 13.0, before 13.5 (fixed in 13.5)
• Apple watchOS: before 5.3.7 (fixed in 5.3.7); from 6.0.0, before 6.2.5 (fixed in 6.2.5)

Published 2020-06-09. Last modified 2026-06-17.