CVE-2020-3874

MEDIUM

iPadOS < 13.3.1 - Sensitive Information Exposure via Screenshot Naming

Title source: llm
STIX 2.1

Description

An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content.

References (1)

Core 1
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT210918

Scores

CVSS v3 5.3
EPSS 0.0080
EPSS Percentile 51.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-212
Status published
Products (2)
apple/ipados < 13.3.1
apple/iphone_os < 13.3.1
Published Feb 27, 2020
Tracked Since Feb 18, 2026