CVE-2018-4427

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to: iOS 12.1, watchOS 5.1.2, tvOS 12.1.1, macOS High Sierra 10.13.6 Security Update 2018-003 High Sierra, macOS Sierra 10.12.6 Security Update 2018-006.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-44287.1A lock screen issue allowed access to the share function on a locked device. This issue was addressed by restricting options offered on a loCVE-2018-44296.5A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prioCVE-2018-44302.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue affecCVE-2018-44315.5A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10CVE-2018-44335.5A configuration issue was addressed with additional restrictions. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 HighCVE-2018-44347.1An out-of-bounds read was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14.2.CVE-2018-44357.8A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1,CVE-2018-44367.5A certificate validation issue existed in configuration profiles. This was addressed with additional checks. This issue affected versions prCVE-2018-44378.8Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.CVE-2018-44388.8A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior CVE-2018-44396.5A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 for WinCVE-2018-44404.3A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, Safari 12.0.2, iTunes 12.9.2 f
CVE-2018-4427: High severity, CVSS 7.8 | Vulnix