High severity8.8NVD Advisory· Published Apr 1, 2020· Updated Jun 17, 2026

CVE-2020-3897

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iOSllm-fuzzy2 versions
13.4+ 1 more
- (no CPE)range: 13.4
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy2 versions
13.4+ 1 more
- (no CPE)range: 13.4
- cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*range: <13.4
Apple Inc./Safarillm-fuzzy3 versions
13.1+ 2 more
- (no CPE)range: 13.1
- (no CPE)range: unspecified
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <13.1
Apple Inc./tvOSv52 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <13.4
Apple Inc./watchOSv52 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <6.2
osv-coords62 versions
pkg:rpm/almalinux/xdg-desktop-portal-gtk pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/almalinux/LibRaw-devel pkg:rpm/almalinux/PackageKit pkg:rpm/almalinux/PackageKit-command-not-found pkg:rpm/almalinux/PackageKit-cron pkg:rpm/almalinux/PackageKit-glib pkg:rpm/almalinux/PackageKit-glib-devel pkg:rpm/almalinux/PackageKit-gstreamer-plugin pkg:rpm/almalinux/PackageKit-gtk3-module pkg:rpm/almalinux/dleyna-renderer pkg:rpm/almalinux/frei0r-devel pkg:rpm/almalinux/frei0r-plugins pkg:rpm/almalinux/frei0r-plugins-opencv pkg:rpm/almalinux/gnome-remote-desktop pkg:rpm/almalinux/gtk-doc pkg:rpm/almalinux/gvfs pkg:rpm/almalinux/libsoup pkg:rpm/almalinux/libsoup-devel pkg:rpm/almalinux/mutter-devel pkg:rpm/almalinux/nautilus pkg:rpm/almalinux/nautilus-devel pkg:rpm/almalinux/pipewire pkg:rpm/almalinux/pipewire-libs pkg:rpm/almalinux/pipewire-utils pkg:rpm/almalinux/pipewire0.2-libs pkg:rpm/almalinux/potrace pkg:rpm/almalinux/pygobject3-devel pkg:rpm/almalinux/python3-gobject pkg:rpm/almalinux/python3-gobject-base pkg:rpm/almalinux/tracker pkg:rpm/almalinux/tracker-devel pkg:rpm/almalinux/vte-profile pkg:rpm/almalinux/vte291 pkg:rpm/almalinux/vte291-devel pkg:rpm/almalinux/webrtc-audio-processing pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/almalinux/pipewire-devel pkg:rpm/almalinux/pipewire-doc pkg:rpm/almalinux/pipewire0.2-devel pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209
< 1.6.0-1.el8+ 61 more
- (no CPE)range: < 1.6.0-1.el8
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 0.19.5-2.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 1.1.12-6.el8
- (no CPE)range: < 0.6.0-3.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 1.6.1-7.el8
- (no CPE)range: < 0.1.8-3.el8
- (no CPE)range: < 1.28-2.el8
- (no CPE)range: < 1.36.2-10.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 2.62.3-2.el8
- (no CPE)range: < 3.32.2-48.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 3.28.1-14.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 1.15-3.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 3.28.3-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 2.1.5-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.52.4-2.el8
- (no CPE)range: < 0.3-9.el8
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.3.6-1.el8
- (no CPE)range: < 0.2.7-6.el8
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-2.82.1
- (no CPE)range: < 2.34.3-3.92.1
- (no CPE)range: < 2.34.3-2.82.1
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified
Apple Inc./iCloud for Windowscpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified
Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
Range: <7.18
Apple Inc./iTunes
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
Range: <12.10.5
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <13.4

Patches

Vulnerability mechanics

References

support.apple.com/HT211101nvdRelease NotesVendor Advisory
support.apple.com/HT211102nvdRelease NotesVendor Advisory
support.apple.com/HT211103nvdRelease NotesVendor Advisory
support.apple.com/HT211104nvdRelease NotesVendor Advisory
support.apple.com/HT211105nvdRelease NotesVendor Advisory
support.apple.com/HT211106nvdRelease NotesVendor Advisory
support.apple.com/HT211107nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000