CVE-2018-4109

HIGH

Apple tvOS < 11.2.5 - Remote Code Execution in Graphics Driver

Title source: llm

Description

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT208462

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT208464

Vendor Advisory x_refsource_confirm

https://support.apple.com/HT208463

Scores

CVSS v3 7.8

EPSS 0.0129

EPSS Percentile 66.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (3)

apple/apple_tv < 11.2.5

apple/iphone_os < 11.2.5

apple/watchos < 4.2.2

Published Apr 03, 2018

Tracked Since Feb 18, 2026