CVE-2018-4278

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.

Metrics

CVSS 3.0 4.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 11, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-42795.3An inconsistent user interface issue was addressed with improved state management. This issue affected versions prior to Safari 11.1.2.CVE-2018-42807.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 1 CVE-2018-42819.8In SwiftNIO before 1.8.0, a buffer overflow was addressed with improved size validation.CVE-2018-42825.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This iss CVE-2018-42835.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This iss CVE-2018-42848.8A type confusion issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4 CVE-2018-42857.8A type confusion issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6.CVE-2018-42869.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1 CVE-2018-42879.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1 CVE-2018-42889.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.1 CVE-2018-42895.5An information disclosure issue was addressed by removing the vulnerable code. This issue affected versions prior to macOS High Sierra 10.13 CVE-2018-42905.9A denial of service issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, watchOS 4.3.2.