CVE-2024-54540

CVE-2024-54540 affects Apple Music for Windows. The issue allows processing maliciously crafted web content to disclose internal app states. Root cause: insufficient input sanitization; fix applied in Apple Music 1.5.0.152 for Windows. Affected: Apple Music (Windows 10/11 platforms). Status: patc...

CVE-2022-32906

Apple Music on Android was affected by CVE-2022-32906, where a user in a privileged network position could intercept SSL/TLS connections, exposing data. The issue was addressed in Apple Music 3.9.10 for Android by enforcing HTTPS for network communication. Affected versions prior to 3.9.10 potent...

CVE-2020-9982

Apple Music for Android (version 3.4.0) fixes a vulnerability where a malicious application could leak a user's credentials. The issue was mitigated by improved checks to prevent unauthorized actions. Affected product: Apple Music on Android; root cause details are not fully disclosed in the avai...

CVE-2021-46841

CVE-2021-46841 affects Apple Music on Android prior to version 3.5.0. The issue allowed an attacker in a privileged network position to track a user’s activity due to inadequate protection when transmitting data over the network. Apple’s security note confirms the remediation: Apple Music 3.5.0 f...

CVE-2023-28203

Apple Music on Android (Android 5.0+) fixed in version 4.2.0 for Android (CVE-2023-28203). The issue allowed an app to access contacts due to inadequate checks; Apple attributes the fix to improved checks. Exploit details, affected components, and in‑the‑wild status are not provided in the suppli...

CVE-2022-32836

CVE-2022-32836 affects Apple Music on Android prior to version 3.9.10. The issue, described as being addressed with improved state management, could allow an app to access user-sensitive data. Apple’s advisory confirms the fix in Apple Music 3.9.10 for Android. No exploitation details are provide...

CVE-2022-32846

CVE-2022-32846 affects Apple Music on Android (prior to version 3.9.10). A logic issue related to state management could allow an app to access user-sensitive data. The vulnerability is fixed in Apple Music 3.9.10 for Android; affected component is the Apple Music Android app, with the root cause...

CVE-2023-32427

CVE-2023-32427 affects Apple Music on Android (pre-4.2.0). The issue allowed a privileged network attacker to intercept unencrypted network traffic; remediation was to enforce HTTPS for data in transit in the 4.2.0 Android release. Exploitation details are not provided in the connected documents.