CVE-2020-3916
First published: Tue Mar 24 2020(Updated: )
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclose a photo without needing permission to access photos.
Credit: Vitaliy Alekseev @villy21 Vitaliy Alekseev @villy21 product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple watchOS | <6.2 | 6.2 |
| Apple iOS | <13.4 | 13.4 |
| Apple iPadOS | <13.4 | 13.4 |
| Apple iPadOS | <13.4 | |
| Apple iPhone OS | <13.4 | |
| Apple watchOS | <6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2020-9772
- CVE-2020-3917
- CVE-2020-3883
- CVE-2020-3913
- CVE-2020-3916
- CVE-2020-9768
- CVE-2020-3919
- CVE-2020-3914
- CVE-2020-9785
- CVE-2020-3909
- CVE-2020-3911
- CVE-2020-3910
- CVE-2020-3891
- CVE-2020-3918
- CVE-2020-9787
- CVE-2020-3899
- CVE-2020-3895
- CVE-2020-3900
- CVE-2020-3901
- CVE-2020-3897
- CVE-2020-9770
- CVE-2020-9780
- CVE-2020-9777
- CVE-2020-3890
- CVE-2020-9775
- CVE-2020-9781
- CVE-2020-3888
- CVE-2020-3894
- CVE-2020-3902
- CVE-2020-3887
- CVE-2020-9783
- CVE-2020-3885
Frequently Asked Questions
What is CVE-2020-3916?
CVE-2020-3916 is a vulnerability that allows for an access issue in the Icons component.
How does the vulnerability affect Apple iOS?
The vulnerability affects Apple iOS versions up to but excluding 13.4.
How does the vulnerability affect Apple iPadOS?
The vulnerability affects Apple iPadOS versions up to but excluding 13.4.
How does the vulnerability affect Apple watchOS?
The vulnerability affects Apple watchOS versions up to but excluding 6.2.
How can I find more information on this vulnerability?
You can find more information on this vulnerability at the following references: [CVE-2020-3916](https://support.apple.com/en-us/HT211103) and [Apple Security Updates](https://support.apple.com/en-us/HT211102).
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/event
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple watchos
- canonical/apple ipados
- canonical/apple iphone os
- canonical/apple ios