A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges.
References
Link | Resource |
---|---|
https://support.apple.com/HT210918 | Release Notes Vendor Advisory |
https://support.apple.com/HT210919 | Release Notes Vendor Advisory |
https://support.apple.com/HT210920 | Release Notes Vendor Advisory |
https://support.apple.com/HT210921 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-02-27 21:15
Updated : 2024-02-28 17:28
NVD link : CVE-2020-3853
Mitre link : CVE-2020-3853
CVE.ORG link : CVE-2020-3853
JSON object : View
Products Affected
apple
- watchos
- mac_os_x
- iphone_os
- tvos
- ipados
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')