CVE-2020-3825

Published: Feb 27, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (6)

Products: Apple: Icloud, Ipados, Iphone Os, Itunes, Safari, Tvos

6 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Icloud	Before 11.0
Apple Ipados	Before 13.3.1
Apple Iphone Os	Before 13.3.1
Apple Itunes	Before 12.10.4
Apple Safari	Before 3.0.5
Apple Tvos	Before 13.3.1

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://support.apple.com/HT210947

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/HT210948

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/HT210947

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/HT210948

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.