CVE-2017-13868

MEDIUM

Apple <11.2, <10.13.2, <4.2, <11.2 - Info Disclosure

Title source: llm

Description

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.

Exploits (2)

exploitdb WORKING POC
by Brandon Azad · clocalmacos
https://www.exploit-db.com/exploits/44234
nomisec WORKING POC 27 stars
by bazad · poc
https://github.com/bazad/ctl_ctloutput-leak

Scores

CVSS v3 5.5
EPSS 0.0986
EPSS Percentile 93.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (4)
apple/iphone_os < 11.2
apple/mac_os_x < 10.13.2
apple/tvos < 11.2
apple/watchos < 4.2
Published Dec 25, 2017
Tracked Since Feb 18, 2026