Home > Vulnerability Database > CVE-2018-4372

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2018-4372

Date: April 3, 2019

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

Language: Unix

Severity Score

8.8

Related Resources (9)

Url: https://support.apple.com/kb/HT209197

Url: https://support.apple.com/kb/HT209198

Url: https://nvd.nist.gov/vuln/detail/CVE-2018-4372

Url: https://support.apple.com/kb/HT209192

Url: https://support.apple.com/kb/HT209194

Url: https://support.apple.com/kb/HT209195

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2018-4372

Url: https://support.apple.com/kb/HT209196

Url: https://www.mend.io/vulnerability-database/CVE-2018-4372

Severity Score

8.8

Weakness Type (CWE)

Buffer Errors

CWE-119

CVSS v3.1

Base Score:	8.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us