CVE-2020-3843
published 2020-02-27CVE-2020-3843: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to…
PriorityP346high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
3.59%
88.1th percentile
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios-1 | >= unspecified < iOS 12.4.7 | iOS 12.4.7 |
| apple | iphone_os | < 12.4.7 | 12.4.7 |
| apple | watchos | < 5.3.7 | 5.3.7 |
| apple | watchos-1 | >= unspecified < watchOS 5.3.7 | watchOS 5.3.7 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p4qp-fw5j-87q5: A memory corruption issue was addressed with improved input validation
ghsa_unreviewed·2022-05-24
CVE-2020-3843 [HIGH] CWE-119 GHSA-p4qp-fw5j-87q5: A memory corruption issue was addressed with improved input validation
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Project0
An iOS zero-click radio proximity exploit odyssey - Project Zero
project_zero·2020-12-01
CVE-2020-3843 An iOS zero-click radio proximity exploit odyssey - Project Zero
Posted by Ian Beer, Project Zero
NOTE: This specific issue was fixed before the launch of Privacy-Preserving Contact Tracing in iOS 13.5 in May 2020.
## In this demo I remotely trigger an unauthenticated kernel memory corruption vulnerability which causes all iOS devices in radio-proximity to reboot, with no user interaction. Over the next 30'000 words I'll cover the entire process to go from this basic demo to successfully exploiting this vulnerability in order to run arbitrary code on any nearby iOS device and steal all the user dataIntroduction
Quoting @halvarflake's Offensivecon keynote from February 2020:
"Exploits are the closest thing to "magic spells" we experience in the real world: Construct the right incantation, gain remote control over device."
For 6 months of 2020, w
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/162119/iOS-macOS-Radio-Proximity-Kernel-Memory-Corruption.htmlhttps://support.apple.com/HT211169https://support.apple.com/HT211176http://packetstormsecurity.com/files/162119/iOS-macOS-Radio-Proximity-Kernel-Memory-Corruption.htmlhttps://support.apple.com/HT211169https://support.apple.com/HT211176
2020-02-27
Published