CVE-2022-32846

CVSS 7.5v3.1pub. 2023-02-27upd. 2025-03-11

A logic issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android. An app may be able to access user-sensitive data.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Apple Music
APP
Apple
3.9.10

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

NVD-CWE-noinfo

CWE-664

References

support.apple.com/en-us/HT213473…

Related vulnerabilities

CVE-2022-32836HIGH7.5ten sam produkt

This issue was addressed with improved state management. This issue is fixed in Apple Music 3.9.10 for Android...

CVE-2024-54540MEDIUM4.3ten sam produkt

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Win...

CVE-2023-28203MEDIUM5.5ten sam produkt

The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may...

CVE-2023-32427MEDIUM5.9ten sam produkt

This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Appl...

CVE-2022-32906MEDIUM5.3ten sam produkt

This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Ap...