Buffer Overflow Vulnerability in Apple Products
CVE-2020-3846

8.8HIGH

Key Information:

Vendor

Apple
Status
iOS
Mac OS
TV OS
Watch OS
Vendor
CVE Published:
27 February 2020

What is CVE-2020-3846?

A buffer overflow issue was identified in various Apple products, which was resolved through enhanced size validation. When processing specially crafted XML, this vulnerability could lead to unexpected application termination or even allow for arbitrary code execution, potentially compromising the security of the device. Users are encouraged to update their devices to the latest versions to mitigate risks associated with this vulnerability.

Affected Version(s)

iCloud for Windows < unspecified

iCloud for Windows (Legacy) < unspecified

iOS < unspecified

References

https://support.apple.com/HT210947
x_refsource_MISC
https://support.apple.com/HT210948
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.