CVE-2022-32906

MEDIUM 5.3CVE-2022-32906 · Published 27/02/2023 · updated 17/06/2026

In short

CVE-2022-32906 is a MEDIUM (CVSS 5.3) vulnerability affecting music (apple).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 29.0% of all vulnerabilities.
Fix: update to 3.9.10 or later.

Package	Affected versions	Patched versions
music apple	`< 3.9.10`	`3.9.10`

Description

This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.

References

support.apple.com/en-us/HT213473 · Vendor Advisory

More vulnerabilities in music

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

music

apple

< 3.9.10

3.9.10

More vulnerabilities in music

See all →