CVEvulnerability
CVE-2020-3909
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-04-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
Affected configurations
• apple icloud (< 7.18)
• apple icloud (>= 10.9 < 10.9.3)
• apple itunes (< 12.10.5)
• apple ipados (< 13.4)
• apple iphone os (< 13.4)
• apple mac os x (< 10.15.4)
• apple tvos (< 13.4)
• apple watchos (< 6.2)
• oracle sun zfs storage appliance kit software 8.8
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://support.apple.com/HT211100 Vendor Advisory
- https://support.apple.com/HT211101 Vendor Advisory
- https://support.apple.com/HT211102 Vendor Advisory
- https://support.apple.com/HT211103 Vendor Advisory
- https://support.apple.com/HT211105 Vendor Advisory
- https://support.apple.com/HT211106 Vendor Advisory
- https://support.apple.com/HT211107 Vendor Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html Third Party Advisory
- https://support.apple.com/HT211100 Vendor Advisory
- https://support.apple.com/HT211101 Vendor Advisory
- https://support.apple.com/HT211102 Vendor Advisory
- https://support.apple.com/HT211103 Vendor Advisory
- https://support.apple.com/HT211105 Vendor Advisory
- https://support.apple.com/HT211106 Vendor Advisory
- https://support.apple.com/HT211107 Vendor Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html Third Party Advisory