CVE-2020-9780: Low severity Apple iOS and iPadOS vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-9780.

Q: What software is affected by this vulnerability?

The software affected by this vulnerability is Apple iOS and Apple iPadOS.

Q: What is the version of the software that is affected?

The version of the software that is affected is up to, but not including, iOS 13.4 and iPadOS 13.4.

Q: Is there any reference to learn more about this vulnerability?

Yes, you can find more information about this vulnerability at this link: [Reference](https://support.apple.com/en-us/HT211102).

Published Mar 24, 2020

Updated

Mail. The issue was resolved by clearing application previews when content is deleted.

Other sources

The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher.

Credit

an anonymous researcher, Dimitris Chaintinis

Affected Software

4 affected componentsFixes available

Apple iOS and iPadOS<13.4

13.4

Apple iOS, iPadOS, and macOS<13.4

13.4

Apple iOS, iPadOS, and macOS<13.4

iPhone OS<13.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Apple iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 13.4
Upgrade
Upgrade Apple iOS, iPadOS, and macOS to a version that resolves this vulnerability.
Fixed in 13.4
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 13.4
Operational
Clear application previews when content is deleted to prevent deleted content from being viewable in the app switcher (application preview cache).

Event History

Apr 1, 2020

CVE Published

via MITRE·05:57 PM

Data Sourced

via MITRE·05:57 PM

DescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Parent advisories

This vulnerability appears in the following advisories.

HT211102

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-9780.

What software is affected by this vulnerability?

The software affected by this vulnerability is Apple iOS and Apple iPadOS.

What is the version of the software that is affected?

The version of the software that is affected is up to, but not including, iOS 13.4 and iPadOS 13.4.

How was the issue resolved?

The issue was resolved by clearing application previews when content is deleted.

Is there any reference to learn more about this vulnerability?