CVE-2020-3899: Critical severity tvos vulnerability
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.
Other sources
WebKit. A memory consumption issue was addressed with improved memory handling.
WebKitGTK Security Advisory WSA-2020-0005 describes the following issue:
CVE-2020-3899
Impact: A remote attacker may be able to cause arbitrary code execution. Description: A memory consumption issue was addressed with improved memory handling.
Versions affected: WebKitGTK before 2.28.2 and WPE WebKit before 2.28.2.
— Red Hat
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2020-9772
- CVE-2020-3917
- CVE-2020-3883
- CVE-2020-9768
- CVE-2020-3919
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3918
- CVE-2020-9787
- CVE-2020-3895
- CVE-2020-3900
- CVE-2020-3894
- CVE-2020-3899
- CVE-2020-3902
- CVE-2020-3901
- CVE-2020-3887
- CVE-2020-9783
- CVE-2020-3897
- CVE-2020-3885
- CVE-2020-3913
- CVE-2020-3916
- CVE-2020-3891
- CVE-2020-9784
- CVE-2020-9770
- CVE-2020-9780
- CVE-2020-9777
- CVE-2020-3890
- CVE-2020-9775
- CVE-2020-9781
- CVE-2020-3888
Frequently Asked Questions
What is CVE-2020-3899?
CVE-2020-3899 is a memory consumption issue in WebKit that has been addressed by Apple with improved memory handling.
Which software versions are affected by CVE-2020-3899?
CVE-2020-3899 affects tvOS 13.4, Safari 13.1, iOS 13.4, iPadOS 13.4, watchOS 6.2, iCloud for Windows 10.9.3, iTunes for Windows 12.10.5, and iCloud for Windows 7.18.
How can I fix CVE-2020-3899?
To fix CVE-2020-3899, users should update their affected software to the recommended versions: tvOS 13.4, Safari 13.1, iOS 13.4, iPadOS 13.4, watchOS 6.2, iCloud for Windows 10.9.3, iTunes for Windows 12.10.5, and iCloud for Windows 7.18.
Where can I find more information about CVE-2020-3899?
More information about CVE-2020-3899 can be found on the official Apple support page: [Link](https://support.apple.com/en-us/HT211103)
Are there any additional references for CVE-2020-3899?
Yes, you can find additional references on the official Apple support pages: [Link 1](https://support.apple.com/en-us/HT211103), [Link 2](https://support.apple.com/en-us/HT211104), [Link 3](https://support.apple.com/en-us/HT211102)