nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-46841 CVE-2021-46841
MEDIUM
Record summary
CVE-2021-46841 has a selected CVSS score of 5.9 (medium).
Description
This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.5.0 for Android. An attacker in a privileged network position can track a user's activity.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 11, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Apple Music for AndroidBrowse Apple / Apple Music for Android | CVE List | Before 3.5 | affected |
References
2support.apple.com
https://support.apple.com/en-us/HT213472