PT-2018-16547

CVE-2018-4404

Published

2018-11-05

Updated

2026-08-11

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.4 macOS High Sierra versions prior to 10.13.5

Description A memory corruption issue exists due to improper memory handling, which was addressed with improved memory handling. The issue also involves an improper access check privilege escalation.

Recommendations For iOS versions prior to 11.4, update to iOS 11.4 or later to resolve the issue. For macOS High Sierra versions prior to 10.13.5, update to macOS High Sierra 10.13.5 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Saelo

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2018-4404