CVE-2020-3836 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Macos

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 67.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple IOS Apple Macos Apple Tvos +4 more

Timeline

PublishedFeb 27

Latest updateMay 24

Description

An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

▶CVEListV5apple/tvosunspecified — tvOS 13.3.1

▶NVDapple/tvos< 13.3.1

▶CVEListV5apple/macosunspecified — macOS Catalina 10.15.3

▶NVDapple/ipados< 13.3.1

▶CVEListV5apple/watchosunspecified — watchOS 6.1.2

🔴Vulnerability Details

GHSA

GHSA-vv89-4gwh-j87x: An access issue was addressed with improved memory management↗2022-05-24

▶

CVEList

CVE-2020-3836: An access issue was addressed with improved memory management↗2020-02-27

▶