CVE-2020-3834: High severity Apple WatchOS vulnerability

Q: What is CVE-2020-3834?

CVE-2020-3834 is a memory corruption issue in the kernel of Apple watchOS.

Q: What is the severity of CVE-2020-3834?

The severity of CVE-2020-3834 is not provided.

Q: How does CVE-2020-3834 affect watchOS?

CVE-2020-3834 affects watchOS 6.1.2.

Q: How can I fix CVE-2020-3834?

To fix CVE-2020-3834, update your Apple watchOS to version 6.1.2.

Q: Where can I find more information about CVE-2020-3834?

You can find more information about CVE-2020-3834 in the Apple support article: [link](https://support.apple.com/en-us/HT210921)

Published Jan 28, 2020

Updated

Kernel. A memory corruption issue was addressed with improved state management.

Other sources

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges.

Credit

Xiaolong Bai, Min (Spark) Zheng(Alibaba Inc), Luyi Xing(Indiana University Bloomington)

Affected Software

2 affected componentsFixes available

Apple WatchOS<6.1.2

6.1.2

Apple WatchOS<6.1.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apple iOS, iPadOS, and watchOS to a version that resolves this vulnerability.
Fixed in 6.1.2
Upgrade
Upgrade Kernel (watchOS) to a version that resolves this vulnerability.
Fixed in 6.1.2

Event History

Feb 27, 2020

CVE Published

via MITRE·08:45 PM

Data Sourced

via MITRE·08:45 PM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

HT210921

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2020-3834?