CVE-2020-9844: Apple iPadOS

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

A double free issue was addressed with improved memory management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

Affected products

• Apple iPadOS: before 13.5 (fixed in 13.5)
• Apple iPhone OS: before 13.5 (fixed in 13.5)
• Apple Mac OS X: from 10.13, before 10.13.6 (fixed in 10.13.6); from 10.14, before 10.14.6 (fixed in 10.14.6); from 10.15, before 10.15.5 (fixed in 10.15.5); version 10.13.6 only; version 10.14.6 only

Published 2020-06-09. Last modified 2026-06-17.