CVE-2020-3909

—

CVSS 3.1

9.8 critical

EPSS

3%p87

Published

Apr 1, 2020 (Apr 1, 2020)

Modified

Jun 17, 2026

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.

Vendors: apple oracle
Products: icloud, itunes, ipados, iphone os, mac os x, tvos, watchos, sun zfs storage appliance kit software
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.