CVE-2018-4360

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

Score

CVSS 3.0 8.8 High

Status

Modified - product-security@apple.com

Published

2019-04-03

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Icloud (Apple)
• Iphone Os (Apple)
• Itunes (Apple)
• Safari (Apple)
• Tvos (Apple)

References

• https://devcraft.io/2019/02/19/cve-2018-4360-webkit-information-leakage-with-dommatrixinvertself.html
• https://github.com/WebKit/webkit/commit/a0b0e01648892b0bb60a01aca619eec85eb27f7a
• https://support.apple.com/kb/HT209106
• https://support.apple.com/kb/HT209107
• https://support.apple.com/kb/HT209109
• https://support.apple.com/kb/HT209140
• https://support.apple.com/kb/HT209141