CVE-2018-4248

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Apr 3, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-42497.8An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affect CVE-2018-42506.5An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Messages" component. It allows remot CVE-2018-42515.5An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Firmware" component. It allows CVE-2018-42524.6An issue was discovered in certain Apple products. iOS before 11.4 is affected. The issue involves the "Siri" component. It allows physicall CVE-2018-42535.5An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local CVE-2018-42549.8In macOS High Sierra before 10.13.5, an input validation issue existed in the kernel. This issue was addressed with improved input validatio CVE-2018-42555.5In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.CVE-2018-42565.5In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.CVE-2018-42579.8In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.CVE-2018-42589.8In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.CVE-2018-42599.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1 CVE-2018-42606.5An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari