Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
References (7)
Core 7
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211102
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211101
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211103
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211104
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211105
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211106
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/HT211107
Scores
CVSS v3
8.8
EPSS
0.0249
EPSS Percentile
85.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-843
Status
published
Products (7)
apple/icloud
< 7.18
apple/ipad_os
< 13.4
apple/iphone_os
< 13.4
apple/itunes
< 12.10.5
apple/safari
< 13.1
apple/tvos
< 13.4
apple/watchos
< 6.2
Published
Apr 01, 2020
Tracked Since
Feb 18, 2026