Music

music

Vendor: Apple • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-54540 1Apple 1Music Jun 17, 2026 Jan 15, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.
CVE-2023-32427 1Apple 1Music Jun 17, 2026 Jul 28, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traff...Show more This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic.Show less
CVE-2023-28203 1Apple 1Music Jun 17, 2026 Jul 28, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
CVE-2022-32906 1Apple 1Music Jun 17, 2026 Feb 27, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.
CVE-2022-32846 1Apple 1Music Jun 17, 2026 Feb 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVE-2022-32836 1Apple 1Music Jun 17, 2026 Feb 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.
CVE-2021-46841 1Apple 1Music Jun 17, 2026 Feb 27, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
CVE-2020-9982 1Apple 1Music Jun 17, 2026 Oct 27, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in Apple Music 3.4.0 for Android. A malicious application may be able to leak a user's credentials.