CVE-2018-4386

high

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

References

https://github.com/a0zhar/Bad_Hoist-WriteUp

https://support.apple.com/kb/HT209198

https://support.apple.com/kb/HT209197

https://support.apple.com/kb/HT209196

https://support.apple.com/kb/HT209195

https://support.apple.com/kb/HT209194

https://support.apple.com/kb/HT209192

http://packetstormsecurity.com/files/155871/Sony-Playstation-4-Webkit-Code-Execution.html

Details

Source: Mitre, NVD

Published: 2019-04-03

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.06463

Detections

Analytics