CVE-2020-3834 - A memory corruption issue was addressed with improved state management

Back Back to CVE browser

HIGH

A memory corruption issue was addressed with improved state management

Published Feb 27, 2020

7.8

HIGH

CVSS 3.1

EPSS 1.33%

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

Affected products

Vendor Apple Product watchOS Default
unknown
Affected
- ≥ unspecified, < watchOS 6.1.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	watchOS	unknown	Affected ≥ unspecified, < watchOS 6.1.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25099
Advisory
https://support.apple.com/HT210921
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25099		Advisory
https://support.apple.com/HT210921		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Feb 27, 2020

Updated Aug 4, 2024

Reserved Dec 18, 2019

Link CVE-2020-3834

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-3834

Red Hat

No data

ENISA EUVD

Assigner apple

Published Feb 27, 2020

Updated Aug 4, 2024

Link EUVD-2020-25099

GitHub

No data