CVE-2022-32906: Apple Music

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

This issue was addressed with using HTTPS when sending information over the network. This issue is fixed in Apple Music 3.9.10 for Android. A user in a privileged network position may intercept SSL/TLS connections.

Affected products

• Apple Music: before 3.9.10 (fixed in 3.9.10)

Published 2023-02-27. Last modified 2026-06-17.