CVE-2018-4203 Memory corruption in iOS, macOS, tvOS, watchOS

High 7.5 Published 3 Apr 2019 Updated 5 Aug 2024

An out-of-bounds read in Apple operating systems could allow attackers to disclose sensitive information or cause a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-4203?

CVE-2018-4203 is a high-severity memory corruption vulnerability in Apple Iphone Os, published on 3 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Weakness: CWE-125

Which versions are affected by CVE-2018-4203?

It affects 4 products.

Products include Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos.

How do I fix CVE-2018-4203?

No fix has been published for CVE-2018-4203 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-4203 being exploited?

There is no known exploitation of CVE-2018-4203 in the wild and no public exploit code.

All Apple Iphone Os vulnerabilities

Sources

Also known as GHSA-6x79-r8fq-v3c6.