CVE-2020-3897: Critical severity tvos vulnerability
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
Other sources
WebKit. A type confusion issue was addressed with improved memory handling.
WebKitGTK Security Advisory WSA-2020-0005 describes the following issue:
CVE-2020-3897
Impact: A remote attacker may be able to cause arbitrary code execution. Description: A type confusion issue was addressed with improved memory handling.
Versions affected: WebKitGTK before 2.28.0 and WPE WebKit before 2.28.0.
— Red Hat
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-9772
- CVE-2020-3917
- CVE-2020-3883
- CVE-2020-9768
- CVE-2020-3919
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3918
- CVE-2020-9787
- CVE-2020-3895
- CVE-2020-3900
- CVE-2020-3894
- CVE-2020-3899
- CVE-2020-3902
- CVE-2020-3901
- CVE-2020-3887
- CVE-2020-9783
- CVE-2020-3897
- CVE-2020-3885
- CVE-2020-3913
- CVE-2020-3916
- CVE-2020-3891
- CVE-2020-9784
- CVE-2020-9770
- CVE-2020-9780
- CVE-2020-9777
- CVE-2020-3890
- CVE-2020-9775
- CVE-2020-9781
- CVE-2020-3888
Frequently Asked Questions
What is CVE-2020-3897?
CVE-2020-3897 is a type confusion issue in WebKit that was addressed with improved memory handling.
Which software versions are affected by CVE-2020-3897?
The affected software versions include Safari 13.1, iOS up to 13.4, iPadOS up to 13.4, watchOS up to 6.2, iCloud for Windows up to 7.18, iTunes for Windows up to 12.10.5, iCloud for Windows up to 10.9.3, and tvOS up to 13.4.
How can I fix the CVE-2020-3897 vulnerability?
To fix the CVE-2020-3897 vulnerability, it is recommended to update the affected software to the latest version provided by Apple.
Where can I find more information about CVE-2020-3897?
You can find more information about CVE-2020-3897 on the Apple support page at the following references: [reference 1](https://support.apple.com/en-us/HT211103), [reference 2](https://support.apple.com/en-us/HT211104), [reference 3](https://support.apple.com/en-us/HT211102).