CVE-2018-4308

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to macOS Mojave 10.14.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-43096.1A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior toCVE-2018-431010.0An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10.14.CVE-2018-43118.1The issue was addressed by removing origin information. This issue affected versions prior to iOS 12, watchOS 5, Safari 12, iTunes 12.9 for CVE-2018-43128.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunCVE-2018-43135.5A consistency issue existed in the handling of application snapshots. The issue was addressed with improved handling of message deletions. TCVE-2018-43148.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunCVE-2018-43158.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunCVE-2018-43168.8A memory corruption issue was addressed with improved state management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTCVE-2018-43178.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunCVE-2018-43188.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunCVE-2018-43198.1A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins. This issue affected versCVE-2018-43215.3A validation issue existed in the entitlement verification. This issue was addressed with improved validation of the process entitlement. Th
CVE-2018-4308: Medium severity, CVSS 5.5 | Vulnix