Description
Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.
References (7)
Core 7
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209141
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209140
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209107
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209106
Vendor Advisory x_refsource_misc
https://support.apple.com/kb/HT209109
Various Sources x_refsource_misc
https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html
Patch x_refsource_misc
https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a
Scores
CVSS v3
8.8
EPSS
0.0219
EPSS Percentile
80.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (5)
apple/icloud
< 7.7
apple/iphone_os
< 12.0
apple/itunes
< 12.9
apple/safari
< 12
apple/tvos
< 12
Published
Apr 03, 2019
Tracked Since
Feb 18, 2026