CVE-2020-3856

State: PUBLISHED · Published: 2020-02-27 · Updated: 2024-08-04 · Assigner: apple

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted string may lead to heap corruption.

CWE

(none)

Affected

Apple / iOS — v=unspecified <iOS 13.3.1 and iPadOS 13.3.1 [affected]
Apple / macOS — v=unspecified <macOS Catalina 10.15.3 [affected]
Apple / tvOS — v=unspecified <tvOS 13.3.1 [affected]
Apple / watchOS — v=unspecified <watchOS 6.1.2 [affected]

CVSS

(none)

References

https://support.apple.com/HT210919 x_refsource_MISC
https://support.apple.com/HT210918 x_refsource_MISC
https://support.apple.com/HT210921 x_refsource_MISC
https://support.apple.com/HT210920 x_refsource_MISC

Source

cvelistV5-main/cves/2020/3xxx/CVE-2020-3856.json