CVE-2018-4336

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-43377.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-43385.5A validation issue was addressed with improved input sanitization. This issue affected versions prior to macOS Mojave 10.14.CVE-2018-43395.5This issue was addressed with a new entitlement. This issue is fixed in iOS 12.1. A local user may be able to read a persistent device identCVE-2018-43407.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-43418.6A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-43425.5A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS Mojave 10.14.1.CVE-2018-43437.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-43447.8A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOCVE-2018-43456.1A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior toCVE-2018-43465.5A validation issue existed which allowed local file access. This was addressed with input sanitization. This issue affected versions prior tCVE-2018-43477.8A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOSCVE-2018-43485.5A validation issue was addressed with improved logic. This issue affected versions prior to macOS Mojave 10.14.
CVE-2018-4336: High severity, CVSS 7.8 | Vulnix