Apple iOS

CVE-2018-4474
HIGH 7.5

At a glance

Source
NVD
EPSS
EPSS 1.71 % · percentile 77 ()
State
PUBLISHED
Published
Updated
Assigner
apple
NVD status
Modified

Description

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.

Weaknesses (CWE)

  • CWE-400 — Uncontrolled Resource Consumption

References

Scores

VersionScoreVectorScored by
CVSS 3.1HIGH 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0MEDIUM 5.0AV:N/AC:L/Au:N/C:N/I:N/A:PNVD · nvd@nist.gov (Primary)

European references

Affected configurations (NVD CPE)

Affected products

ProductVersions
Apple · iOSaffected unspecified < 12
Apple · tvOSaffected unspecified < 12
Apple · watchOSaffected unspecified < 5
Apple · Safariaffected unspecified < 12
Apple · iTunes for Windowsaffected unspecified < 12.9
Apple · iCloud for Windowsaffected unspecified < 7.7

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD