CVE-2020-6616: Apple iPadOS

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).

Affected products

• Apple iPadOS: before 13.5 (fixed in 13.5)
• Apple iPhone OS: before 13.5 (fixed in 13.5)
• Apple Mac OS X: from 10.13.0, before 10.13.6 (fixed in 10.13.6); from 10.14.0, before 10.14.6 (fixed in 10.14.6); from 10.15, before 10.15.4 (fixed in 10.15.4); version 10.13.6 only; version 10.14.6 only
• Google Android: affected versions not specified

Published 2020-05-08. Last modified 2026-06-17.