CVE-2018-4344highunder attackCWE-119

CVE-2018-4344: high-severity vulnerability in iOS, macOS, tvOS, watchOS

Published · Updated

Follow this CVE+ Monitor iOS, macOS, tvOS, watchOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.8epss 2.4%
from disclosure to weapon
Published on NVDApr 3
CISA KEV+1181d
Action required by CISAfederal deadline: 2022-07-18

Apply updates per vendor instructions.

In short

A memory corruption vulnerability in Apple devices allowed attackers to crash applications or potentially execute code by exploiting improper memory handling. This affected older versions of iOS, macOS, tvOS, and watchOS.

Technical detail

Out-of-bounds memory access (CWE-119) in Apple operating systems prior to iOS 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The vulnerability required local or network-based interaction depending on context, potentially enabling denial of service or arbitrary code execution through crafted input triggering unsafe memory operations.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · iOS, macOS, tvOS, watchOS