CVE-2018-4216

MEDIUM

iPhone OS < 11.4.1 - Logic Issue in Call URL Handling

Title source: llm
STIX 2.1

Description

A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT208938

Scores

CVSS v3 5.5
EPSS 0.0074
EPSS Percentile 50.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

Status published
Products (1)
apple/iphone_os < 11.4.1
Published Apr 03, 2019
Tracked Since Feb 18, 2026