CVE-2018-4248

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

Affected

iOS, macOS, tvOS, watchOS

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.40% chance of exploitation in the next 30 days, 84th percentile

Published

2019-04-03

Updated

2024-08-05

Proof-of-concept exploits (1)

• bazad/xpc-string-leak54★ · 2018-07-10

Security advisories

• https://support.apple.com/kb/HT208935
• https://support.apple.com/kb/HT208936
• https://support.apple.com/kb/HT208937
• https://support.apple.com/kb/HT208938

References

• CVE Record
• NVD entry

Related

• CVE-2016-1825
• CVE-2016-1827
• CVE-2016-7608
• CVE-2016-7617
• CVE-2016-7637
• CVE-2017-13868