What is CVE-2020-3874?

CVE-2020-3874 is a medium-severity vulnerability in Apple iOS, classified under Improper Removal of Sensitive Information Before Storage or Transfer. CVSS score: 5.3/10. Published 2020-02-27.

How severe is CVE-2020-3874?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Apple iOS

CVE-2020-3874

An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Messages app may reveal additional message content.

EPSS: 0.008 (52.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Apple Ios — versions unspecified
Apple Ipados
Apple Iphone_os

Weakness classification (CWE)

CWE-212 — Improper Removal of Sensitive Information Before Storage or Transfer

References

product-security@apple.com (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3874?: CVE-2020-3874 is a medium-severity vulnerability in Apple iOS, classified under Improper Removal of Sensitive Information Before Storage or Transfer. CVSS score: 5.3/10. Published 2020-02-27.
How severe is CVE-2020-3874?: Medium severity. CVSS v3 base score is 5.3 out of 10.