CVE-2018-4323

HIGH

Safari < 12 - Memory Corruption

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-4323. PoCs published by Google Security Research.

AI-analyzed exploit summary This is a use-after-free vulnerability in WebKit, confirmed on Safari 11.1.1 and WebKit revision 233419. The PoC triggers a heap-use-after-free in the WebCore::LayoutUnit::rawValue() function, leading to potential remote code execution.

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · htmldosmultiple

https://www.exploit-db.com/exploits/45484

View Code ZIP pw:eip

This is a use-after-free vulnerability in WebKit, confirmed on Safari 11.1.1 and WebKit revision 233419. The PoC triggers a heap-use-after-free in the WebCore::LayoutUnit::rawValue() function, leading to potential remote code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: WebKit (Safari 11.1.1 and WebKit revision 233419)

No auth needed

Prerequisites: Victim must visit a malicious webpage

MITRE ATT&CK

T1189 - Drive-by Compromise

devstral-2 · analyzed Feb 16, 2026 Full analysis →