CVE-2018-4206

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.3.1 macOS versions prior to 10.13.4 Security Update 2018-001 tvOS versions prior to 11.4 watchOS versions prior to 4.3.1

Description The issue involves the Crash Reporter component and allows attackers to execute arbitrary code or cause a denial of service via a crafted app that replaces a privileged port name, resulting in memory corruption.

Recommendations For iOS versions prior to 11.3.1, update to version 11.3.1 or later. For macOS versions prior to 10.13.4 Security Update 2018-001, apply the 10.13.4 Security Update 2018-001 or later. For tvOS versions prior to 11.4, update to version 11.4 or later. For watchOS versions prior to 4.3.1, update to version 4.3.1 or later.