CVE-2022-32836: Infoleak

Q: What is CVE-2022-32836?

CVE-2022-32836 is a vulnerability in the Apple Music app for Android that was addressed with improved state management.

Q: How does CVE-2022-32836 affect Apple Music on Android?

CVE-2022-32836 affects Apple Music on Android by introducing a vulnerability that has been resolved with improved state management.

Q: What is the severity of CVE-2022-32836?

The severity of CVE-2022-32836 is not specified.

Q: How can I fix CVE-2022-32836?

To fix CVE-2022-32836, update your Apple Music app for Android to version 3.9.10 or later.

Q: Where can I find more information about CVE-2022-32836?

You can find more information about CVE-2022-32836 on the Apple support website: https://support.apple.com/en-us/HT213473

Published Jun 14, 2022

Updated

Apple Music on Android. This issue was addressed with improved state management.

Other sources

This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.

Credit

hluwa, David Coomber(Info), Martin Mwangi Kibuchi

Affected Software

2 affected componentsFixes available

Apple Music Android=3.9.10

Apple Apple Music for Android<3.9.10

3.9.10

Event History

Jun 14, 2022

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Feb 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2022-32836?

CVE-2022-32836 is a vulnerability in the Apple Music app for Android that was addressed with improved state management.

How does CVE-2022-32836 affect Apple Music on Android?