CVE-2020-3838
Description
The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges.
CWE
- (none)
Affected
- Apple / iOS — v=unspecified <iOS 13.3.1 and iPadOS 13.3.1 [affected]
- Apple / macOS — v=unspecified <macOS Catalina 10.15.3 [affected]
- Apple / tvOS — v=unspecified <tvOS 13.3.1 [affected]
- Apple / watchOS — v=unspecified <watchOS 6.1.2 [affected]
CVSS
- (none)
References
- https://support.apple.com/HT210919 x_refsource_MISC
- https://support.apple.com/HT210918 x_refsource_MISC
- https://support.apple.com/HT210921 x_refsource_MISC
- https://support.apple.com/HT210920 x_refsource_MISC
- https://support.apple.com/kb/HT212326 x_refsource_CONFIRM
- https://support.apple.com/kb/HT212327 x_refsource_CONFIRM
- http://seclists.org/fulldisclosure/2021/Apr/51 mailing-list, x_refsource_FULLDISC
Source
cvelistV5-main/cves/2020/3xxx/CVE-2020-3838.json