CVE-2018-4194

Published: Jan 11, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

Affected (5)

Products: Apple: Iphone Os, Mac Os X, Watchos, Icloud, Itunes

5 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 11.4
Apple Mac Os X	From 10.13.0 to 10.13.5
Apple Watchos	Before 4.3.1

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Apple Icloud	Before 7.5
Apple Itunes	Before 12.7.5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.