CVE-2020-3898

Published: 21 April 2020

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. An application may be able to gain elevated privileges.

Priority

Medium

CVSS 3 base score: 7.8

Status

Notes

as of 2020-04-20, does not appear to have landed upstream

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-3898
• https://support.apple.com/en-us/HT211100
• https://ubuntu.com/security/notices/USN-4340-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-3898
• https://bugzilla.redhat.com/show_bug.cgi?id=1826330
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2020-3898