CVE-2020-3847

EPSS 1.34%
Published 01.04.2020 19:15:14
Last modified 21.11.2024 05:31:49
Source product-security@apple.com
Teams watchlist Login
Open Login

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.

Affected products Warnungen 0 Metrics 3 CWE 2 References 4

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS X Version < 10.15.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.34%	0.791

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.apple.com/HT210919

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3847

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-3847

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-3847

EUVD