PT-2018-16556

CVE-2018-4447

Publicado

2018-12-10

Atualizado

2019-04-05

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.1.1 Apple macOS versions prior to 10.14.2 Apple tvOS versions prior to 12.1.1 Apple watchOS versions prior to 5.1.2

Description A memory corruption issue was addressed with improved state management. The issue is related to a Use-After-Free Privilege Escalation Vulnerability in Apple macOS.

Recommendations For Apple iOS versions prior to 12.1.1, update to iOS 12.1.1 or later. For Apple macOS versions prior to 10.14.2, update to macOS 10.14.2 or later. For Apple tvOS versions prior to 12.1.1, update to tvOS 12.1.1 or later. For Apple watchOS versions prior to 5.1.2, update to watchOS 5.1.2 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Juwei Lin

Panicaii

Zhengyu Dong

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Identificadores relacionados