Paper/Archive/CVE-2020-3911

CVE-2020-3911

Apple iOS — A buffer overflow was addressed with improved bounds checking.

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 76.4.764 × 2015.3 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.

Affected

ProductAffectedFixed inSource

iOSunspecified – < iOS 13.4 and iPadOS 13.4iOS 13.4 and iPadOS 13.4CNA

macOSunspecified – < macOS Catalina 10.15.4macOS Catalina 10.15.4CNA

tvOSunspecified – < tvOS 13.4tvOS 13.4CNA

watchOSunspecified – < watchOS 6.2watchOS 6.2CNA

iTunes for Windowsunspecified – < iTunes for Windows 12.10.5iTunes for Windows 12.10.5CNA

iCloud for Windowsunspecified – < iCloud for Windows 10.9.3iCloud for Windows 10.9.3CNA

iCloud for Windows (Legacy)unspecified – < iCloud for Windows 7.18iCloud for Windows 7.18CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.apple.com/HT211100 refsupport.apple.com/HT211102 refsupport.apple.com/HT211101 refsupport.apple.com/HT211103 refsupport.apple.com/HT211105 refsupport.apple.com/HT211106 refsupport.apple.com/HT211107