CVE-2020-3842: 
macOS vulnerability analysis and mitigation

CVE-2020-3842 is a memory corruption vulnerability discovered in Apple's operating systems that was fixed in iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2, released on January 28, 2020. The vulnerability was discovered by Ned Williamson working with Google Project Zero (Apple Security).

The vulnerability is a memory corruption issue in the kernel that was addressed with improved memory handling. It has a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating local access is required with user interaction (NVD).

When exploited, this vulnerability could allow an application to execute arbitrary code with kernel privileges, potentially giving an attacker complete control over the affected device (Apple Security).

The vulnerability requires local access and user interaction to exploit. It affects multiple Apple operating systems including iOS, iPadOS, macOS, tvOS, and watchOS versions prior to the security updates released in January 2020 (NVD).

Apple addressed this vulnerability by releasing security updates for all affected operating systems. Users should update to iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, or watchOS 6.1.2 or later versions to protect against this vulnerability (Apple Security, Apple Security).