Medium severity5.3NVD Advisory· Published Feb 27, 2023· Updated Jun 17, 2026

CVE-2022-32906

Description

This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Music2 versions
cpe:2.3:a:apple:music:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:apple:music:*:*:*:*:*:android:*:*range: <3.9.10
- (no CPE)range: = 3.9.10
Apple Inc./Apple Music Classical for Androidcpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/en-us/HT213473nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000