CVE-2018-4438

high

Description

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

References

https://support.apple.com/kb/HT209340

https://support.apple.com/kb/HT209342

https://support.apple.com/kb/HT209343

https://support.apple.com/kb/HT209344

https://support.apple.com/kb/HT209345

https://support.apple.com/kb/HT209346

Details

Source: MITRE

Published: 2019-04-03

Updated: 2019-04-05

Type: CWE-119

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH