CVE-2020-3846
N/A
N/A
Summary
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Apple | iOS | unspecified < iOS 13.3.1 and iPadOS 13.3.1 | affected |
| Apple | macOS | unspecified < macOS Catalina 10.15.3 | affected |
| Apple | tvOS | unspecified < tvOS 13.3.1 | affected |
| Apple | watchOS | unspecified < watchOS 6.1.2 | affected |
| Apple | iTunes for Windows | unspecified < iTunes for Windows 12.10.4 | affected |
| Apple | iCloud for Windows | unspecified < iCloud for Windows 11.0 | affected |
| Apple | iCloud for Windows (Legacy) | unspecified < iCloud for Windows 7.17 | affected |
Weaknesses
- Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.