CVE-2020-3843: Input Validation
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
Other sources
Wi-Fi. A memory corruption issue was addressed with improved input validation.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
macOS Catalinato a version that resolves this vulnerability.Fixed in 10.15.3 - Upgrade
Upgrade
Apple iOS, iPadOS, and watchOSto a version that resolves this vulnerability.Fixed in 5.3.7 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 12.4.7 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 13.3.1 - Upgrade
Upgrade
Apple iOS, iPadOS, and macOSto a version that resolves this vulnerability.Fixed in 13.3.1 - Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 12.4.7 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 5.3.7
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-3877
- CVE-2019-11043
- CVE-2020-3857
- CVE-2020-3866
- CVE-2020-3848
- CVE-2020-3849
- CVE-2020-3850
- CVE-2020-3847
- CVE-2020-3835
- CVE-2020-3863
- CVE-2020-9774
- CVE-2020-3827
- CVE-2020-3826
- CVE-2020-3870
- CVE-2020-3878
- CVE-2020-3880
- CVE-2020-3845
- CVE-2020-3837
- CVE-2020-3851
- CVE-2020-3840
- CVE-2020-3875
- CVE-2020-3872
- CVE-2020-3853
- CVE-2020-3836
- CVE-2020-3842
- CVE-2020-3871
- CVE-2020-3846
- CVE-2020-3856
- CVE-2020-3829
- CVE-2020-3830
- CVE-2020-3854
- CVE-2019-18634
- CVE-2020-3855
- CVE-2020-3839
- CVE-2020-3843
- CVE-2020-3838
- CVE-2020-9819
- CVE-2020-9818
- CVE-2020-3869
- CVE-2019-8836
- CVE-2020-3858
- CVE-2020-3831
- CVE-2020-3860
- CVE-2020-3873
- CVE-2020-3859
- CVE-2020-3844
- CVE-2020-3828
- CVE-2020-3841
- CVE-2020-3874
- CVE-2020-3862
- CVE-2020-3825
- CVE-2020-3868
- CVE-2020-3867
- CVE-2020-3864
- CVE-2020-3865
Frequently Asked Questions
What is CVE-2020-3843?
CVE-2020-3843 is a memory corruption issue in Wi-Fi that has been addressed with improved input validation.
Which software is affected by CVE-2020-3843?
Apple iOS versions up to and excluding 12.4.7, Apple watchOS versions up to and excluding 5.3.7, Apple iOS versions up to and excluding 13.3.1, Apple iPadOS versions up to and excluding 13.3.1, Apple macOS Catalina versions up to and excluding 10.15.3, Apple Mojave, and Apple High Sierra.
How can I fix CVE-2020-3843?
Update your Apple devices to the recommended software versions: iOS 12.4.7, watchOS 5.3.7, iOS 13.3.1, iPadOS 13.3.1, or macOS Catalina 10.15.3.
What is the severity of CVE-2020-3843?
The severity of CVE-2020-3843 is not specified.
Where can I find more information about CVE-2020-3843?
You can find more information about CVE-2020-3843 on the Apple support page. [^1^] [^2^] [^3^]