Not rated
CVE-2018-4302 A null pointer dereference was addressed with improved validation
Description
A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iOS 11 | earliest → < 11 | 11 |
| watchOS 4 | earliest → < 4 | 4 |
| iTunes for Windows 12.7 | earliest → < 12.7 | 12.7 |
| iCloud for Windows 7.0 | earliest → < 7.0 | 7.0 |
| macOS 10.13 | earliest → < 10.13 | 10.13 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of iOS
The 507 CVEs of iOS →
CVE-2024-44229
An information leakage was addressed with additional validation
5.3
Medium
CVE-2024-44218
This issue was addressed with improved checks
7.8
High
CVE-2024-40867
A custom URL scheme handling issue was addressed with improved input validation
8.8
High
CVE-2024-44259
This issue was addressed through improved state management
8.8
High