CVE-2018-4256

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In macOS High Sierra before 10.13.5, an out-of-bounds read was addressed with improved input validation.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jan 11, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-42579.8In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved size validation.CVE-2018-42589.8In macOS High Sierra before 10.13.5, a buffer overflow was addressed with improved bounds checking.CVE-2018-42599.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1CVE-2018-42606.5An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1, Safari CVE-2018-42618.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.CVE-2018-42628.8In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, multiple memoCVE-2018-42638.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.CVE-2018-42648.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.CVE-2018-42658.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.CVE-2018-42665.9A race condition was addressed with additional validation. This issue affected versions prior toiVersions prior to: OS 11.4.1, tvOS 11.4.1, CVE-2018-42678.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.CVE-2018-42689.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.
CVE-2018-4256: Medium severity, CVSS 5.5 | Vulnix