CVE-2018-4189

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In iOS before 11.2.5, macOS High Sierra before 10.13.3, Security Update 2018-001 Sierra, and Security Update 2018-001 El Capitan, watchOS before 4.2.2, and tvOS before 11.2.5, a memory corruption issue exists and was addressed with improved memory handling.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://support.apple.com/HT208462Vendor Advisory
https://support.apple.com/HT208463Vendor Advisory
https://support.apple.com/HT208464Vendor Advisory
https://support.apple.com/HT208465Vendor Advisory
https://support.apple.com/HT208462Vendor Advisory
https://support.apple.com/HT208463Vendor Advisory
https://support.apple.com/HT208464Vendor Advisory
https://support.apple.com/HT208465Vendor Advisory

Timeline

Published: Jan 11, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-41908.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo CVE-2018-41918.8A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 1 CVE-2018-41927.5An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo CVE-2018-41937.8An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Windows Server" component. It a CVE-2018-41948.8In iOS before 11.4, iCloud for Windows before 7.5, watchOS before 4.3.1, iTunes before 12.7.5 for Windows, and macOS High Sierra before 10.1 CVE-2018-41956.5An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 12.CVE-2018-41967.8An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" compon CVE-2018-41978.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTun CVE-2018-41985.5An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affect CVE-2018-41998.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo CVE-2018-42008.8An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windo CVE-2018-42018.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windo