7.5high
CVE-2018-4474
A memory consumption issue was addressed with improved memory handling.
Published 6 y ago · modified 4 mo ago · JSON
CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.7%
percentile 77%
Public exploits
0
none known
Summary
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.
Exploit prediction (EPSS)
1.71% probability of exploitation in the next 30 days, higher than 77% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Affected products
- Apple iOS
- Apple tvOS
- Apple watchOS
- Apple Safari
- Apple iTunes for Windows
- Apple iCloud for Windows
Classification
- Weakness
- CWE-400 Uncontrolled Resource Consumption
References
- support.apple.com /en-us/HT209106 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT209107 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT209108 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT209109 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT209140 · x_refsource_MISC, x_transferred
- support.apple.com /en-us/HT209141 · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2018-4474
- NVD: CVE-2018-4474
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.