CVE-2018-4303 — Improper Input Validation in Apple Tvos

CWE-20 — Improper Input Validation6 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 52.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple Iphone OSApple MAC OS XApple Tvos+3 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

An input validation issue was addressed with improved input validation. This issue affected versions prior to macOS Mojave 10.14, iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages8 packages

▶NVDapple/mac_os_x< 10.14+1
▶NVDapple/tvos< 12.1.1
▶NVDapple/watchos< 5.1.2
▶Appleapple/tvos12.1.1

🔴Vulnerability Details

1
GHSA
GHSA-875j-vw2m-jghx: An input validation issue was addressed with improved input validation↗2022-05-14
▶

📋Vendor Advisories

4
Apple
CVE-2018-4303: watchOS 5.1.2↗2018-12-06
▶
Apple
CVE-2018-4303: iOS 12.1.1↗2018-12-05
▶
Apple
CVE-2018-4303: tvOS 12.1.1↗2018-12-05
▶
Apple
CVE-2018-4303: macOS Mojave 10.14.2, Security Update 2018-003 High Sierra, Security Update 2018-006 Sierra↗2018-12-05
▶