CVE-2018-4347

HIGH

Apple iPhone OS < 12.0 - Use-After-Free

Title source: llm
STIX 2.1

Description

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

References (6)

Core 6
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209141
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209140
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209107
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209106
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209139
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209108

Scores

CVSS v3 7.8
EPSS 0.0144
EPSS Percentile 69.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (6)
apple/icloud < 7.7
apple/iphone_os < 12.0
apple/itunes < 12.9
apple/mac_os_x < 10.14
apple/tvos < 12
apple/watchos < 5.0
Published Apr 03, 2019
Tracked Since Feb 18, 2026