PT-2019-10818 · Apple · Ios+5

Published 2019-01-11 · Updated 2019-01-17 · CVE-2018-4189

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 11.2.5 Apple macOS High Sierra versions prior to 10.13.3 Apple Security Update 2018-001 Sierra versions prior to the update Apple Security Update 2018-001 El Capitan versions prior to the update Apple watchOS versions prior to 4.2.2 Apple tvOS versions prior to 11.2.5

Description A memory corruption issue exists due to improper memory handling. This issue was addressed with improved memory handling.

Recommendations For iOS versions prior to 11.2.5, update to version 11.2.5 or later. For macOS High Sierra versions prior to 10.13.3, update to version 10.13.3 or later. For Security Update 2018-001 Sierra, apply the security update. For Security Update 2018-001 El Capitan, apply the security update. For watchOS versions prior to 4.2.2, update to version 4.2.2 or later. For tvOS versions prior to 11.2.5, update to version 11.2.5 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-4189

Affected Products

Security Update 2018-001 El Capitan

Security Update 2018-001 Sierra

Ios

Macos High Sierra

Tvos

Watchos

References · 6

• https://osv.dev/vulnerability/CVE-2018-4189 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4189 · Security Note
• https://support.apple.com/HT208462 · Vendor Advisory
• https://support.apple.com/HT208465 · Vendor Advisory
• https://support.apple.com/HT208463 · Vendor Advisory
• https://support.apple.com/HT208464 · Vendor Advisory