CVE-2018-4280

HIGH

Apple Iphone OS < 11.4.1 - Memory Corruption

Title source: rule
STIX 2.1

Description

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

Exploits (2)

nomisec WORKING POC 257 stars
by bazad · poc
https://github.com/bazad/blanket
nomisec WORKING POC 59 stars
by bazad · poc
https://github.com/bazad/launchd-portrep

References (4)

Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT208937
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT208938
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT208935
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT208936

Scores

CVSS v3 7.8
EPSS 0.1857
EPSS Percentile 95.3%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (4)
apple/iphone_os < 11.4.1
apple/mac_os_x < 10.13.6
apple/tvos < 11.4.1
apple/watchos < 4.3.2
Published Apr 03, 2019
Tracked Since Feb 18, 2026