Priority LOW 37
Multiple memory corruption issues were addressed with improved state management.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01283 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-787
Priority LOW 37
A use after free issue was addressed with improved memory management.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01279 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4 +1 CWE-416
Priority LOW 37
A memory initialization issue was addressed with improved memory handling.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01427 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-665
Priority MEDIUM 45
A buffer overflow was addressed with improved size validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01639 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120
Priority LOW 25
This issue was addressed with a new entitlement.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00308 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4 +1
Priority LOW 26
A memory initialization issue was addressed with improved memory handling.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00773 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2 CWE-401
Priority MEDIUM 45
A buffer overflow was addressed with improved bounds checking.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01641 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120
Priority LOW 26
An access issue was addressed with additional sandbox restrictions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0081 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2
Priority LOW 35
A permissions issue existed.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00733 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +1
Priority MEDIUM 48
A buffer overflow was addressed with improved bounds checking.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03039 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +5 CWE-120
Priority MEDIUM 42
A type confusion issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0188 · Published 2020-04-01 · Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843
Priority MEDIUM 42
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01824 · Published 2020-04-01 · Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787
Priority MEDIUM 43
A memory corruption issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02673 · Published 2020-04-01 · Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-787
Priority MEDIUM 45
A memory consumption issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04117 · Published 2020-04-01 · Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5
Priority MEDIUM 45
A type confusion issue was addressed with improved memory handling.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04479 · Published 2020-04-01 · Partial fix · iOS 13.4 and iPadOS 13.4, tvOS 13.4 +5 CWE-843
Priority LOW 12
A logic issue was addressed with improved state management.
CVSS 3.1LOW 2.4· Physical · No auth · No interaction · EPSS 0.00297 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2
Priority MEDIUM 40
This issue was addressed with improved checks.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01036 · Published 2020-04-01 · Fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4 +2