CVE-2018-4248

Опубликовано: 03 апр. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

Ссылки

https://support.apple.com/kb/HT208935
Vendor Advisory
https://support.apple.com/kb/HT208936
Vendor Advisory
https://support.apple.com/kb/HT208937
Vendor Advisory
https://support.apple.com/kb/HT208938
Vendor Advisory
https://support.apple.com/kb/HT208935
Vendor Advisory
https://support.apple.com/kb/HT208936
Vendor Advisory
https://support.apple.com/kb/HT208937
Vendor Advisory
https://support.apple.com/kb/HT208938
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 11.4.1 (исключая)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.13.6 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 11.4.1 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 4.3.2 (исключая)

EPSS

Процентиль: 86%

0.02768

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

GHSA-jv9x-cxgp-mvmj