CVE-2018-4313

MEDIUM

iPhone OS < 12.0 - Improper Input Validation in Application Snapshot Handling

Title source: llm

Description

A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209107

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209106

Vendor Advisory x_refsource_misc

https://support.apple.com/kb/HT209108

Scores

CVSS v3 5.5

EPSS 0.0035

EPSS Percentile 26.8%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-20

Status published

Products (3)

apple/iphone_os < 12.0

apple/tvos < 12

apple/watchos < 5.0

Published Apr 03, 2019

Tracked Since Feb 18, 2026