CVE-2020-3856

Related Files

XPC Memory Disclosure / Corruption

Posted Feb 13, 2020

Authored by Google Security Research, Ian Beer

XPC fast path fails to ensure NULL termination of XPC strings, leading to memory disclosure and corruption vulnerabilities in XPC services.

tags | exploit, vulnerability

advisories | CVE-2020-3856

SHA-256 | 177cb639e6a25a5904e8f4f9ae68c987f945f93207a3d09333a7ea42bc47e766

Download | Favorite | View

Apple Security Advisory 2020-1-28-1

Posted Jan 29, 2020

Authored by Apple | Site apple.com

Apple Security Advisory 2020-1-28-1 - iOS 13.3.1 and iPadOS 13.3.1 are now available and address code execution vulnerabilities.

tags | advisory, vulnerability, code execution

systems | apple, ios

advisories | CVE-2020-3828, CVE-2020-3829, CVE-2020-3831, CVE-2020-3836, CVE-2020-3837, CVE-2020-3838, CVE-2020-3840, CVE-2020-3841, CVE-2020-3842, CVE-2020-3844, CVE-2020-3853, CVE-2020-3856, CVE-2020-3857, CVE-2020-3858, CVE-2020-3859, CVE-2020-3860, CVE-2020-3869, CVE-2020-3870, CVE-2020-3872, CVE-2020-3873, CVE-2020-3874, CVE-2020-3875, CVE-2020-3878

SHA-256 | 451f9f0db4b53867f6b4613f74a664aaee0fadcb5afed494d424333c909099b5

Download | Favorite | View

Apple Security Advisory 2020-1-28-2

Posted Jan 29, 2020

Authored by Apple | Site apple.com

Apple Security Advisory 2020-1-28-2 - macOS Catalina 10.15.3, Security Update 2020-001 Mojave, and Security Update 2020-001 High Sierra are now available and address buffer overflow, bypass, and code execution vulnerabilities.

tags | advisory, overflow, vulnerability, code execution

systems | apple

advisories | CVE-2019-11043, CVE-2019-18634, CVE-2020-3826, CVE-2020-3827, CVE-2020-3829, CVE-2020-3830, CVE-2020-3835, CVE-2020-3836, CVE-2020-3837, CVE-2020-3838, CVE-2020-3839, CVE-2020-3840, CVE-2020-3842, CVE-2020-3843, CVE-2020-3845, CVE-2020-3846, CVE-2020-3847, CVE-2020-3848, CVE-2020-3849, CVE-2020-3850, CVE-2020-3853, CVE-2020-3854, CVE-2020-3855, CVE-2020-3856, CVE-2020-3857, CVE-2020-3866, CVE-2020-3870, CVE-2020-3871

SHA-256 | 6dc59a831c4eeb00f22a91e88c410f4413de1117cf660dac3d76799ab2d9c97d

Download | Favorite | View

Apple Security Advisory 2020-1-28-4

Posted Jan 29, 2020

Authored by Apple | Site apple.com

Apple Security Advisory 2020-1-28-4 - tvOS 13.3.1 is now available and addresses code execution vulnerabilities.

tags | advisory, vulnerability, code execution

systems | apple

advisories | CVE-2020-3829, CVE-2020-3836, CVE-2020-3837, CVE-2020-3838, CVE-2020-3840, CVE-2020-3842, CVE-2020-3853, CVE-2020-3856, CVE-2020-3857, CVE-2020-3868, CVE-2020-3870, CVE-2020-3872, CVE-2020-3875, CVE-2020-3878

SHA-256 | 8811822470152c7c5c5739e0be582b4d494845ed881e590aa7e2da5e6d1452fb

Download | Favorite | View

Apple Security Advisory 2020-1-28-3

Posted Jan 29, 2020

Authored by Apple | Site apple.com

Apple Security Advisory 2020-1-28-3 - watchOS 6.1.2 is now available and addresses code execution vulnerabilities.

tags | advisory, vulnerability, code execution

systems | apple

advisories | CVE-2020-3829, CVE-2020-3834, CVE-2020-3836, CVE-2020-3837, CVE-2020-3838, CVE-2020-3842, CVE-2020-3853, CVE-2020-3856, CVE-2020-3857, CVE-2020-3860, CVE-2020-3870, CVE-2020-3872, CVE-2020-3875, CVE-2020-3877, CVE-2020-3878

SHA-256 | dbe2c3cb8a3c6e9e7d49c188d63249672b132824e400c3434a381fea33e430a0

Download | Favorite | View