CVE-2018-4474
HIGHCVSS 7.5/10EPSS 1.69%
Last modified
CVE-2018-4474 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. EPSS estimates a 1.69% chance of exploitation in the next 30 days.
Description
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Icloud | < 7.7 |
| Apple | Itunes | < 12.9 |
| Apple | Safari | < 12 |
| Apple | Iphone Os | < 12.0 |
| Apple | Tvos | < 12 |
| Apple | Watchos | < 5.0 |
References
- https://support.apple.com/en-us/HT209106Vendor Advisory
- https://support.apple.com/en-us/HT209107Vendor Advisory
- https://support.apple.com/en-us/HT209108Vendor Advisory
- https://support.apple.com/en-us/HT209109Vendor Advisory
- https://support.apple.com/en-us/HT209140Vendor Advisory
- https://support.apple.com/en-us/HT209141Vendor Advisory
- https://support.apple.com/en-us/HT209106Vendor Advisory
- https://support.apple.com/en-us/HT209107Vendor Advisory
- https://support.apple.com/en-us/HT209108Vendor Advisory
- https://support.apple.com/en-us/HT209109Vendor Advisory
- https://support.apple.com/en-us/HT209140Vendor Advisory
- https://support.apple.com/en-us/HT209141Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-4474?
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iCloud for Windows 7.7, watchOS 5, Safari 12, iOS 12, iTunes 12.9 for Windows, tvOS 12. Unexpected interaction causes an ASSERT failure.
How severe is CVE-2018-4474?
CVE-2018-4474 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.69% probability of exploitation in the next 30 days.
How do I fix CVE-2018-4474?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2018-4474?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST