CVE-2018-4347 — Use After Free in Apple Icloud

CWE-416 — Use After Free9 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 41.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple IcloudApple Iphone OSApple Itunes+3 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, iCloud for Windows 7.7.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶NVDapple/tvos< 12
▶NVDapple/icloud< 7.7
▶NVDapple/itunes< 12.9
▶NVDapple/watchos< 5.0
▶NVDapple/mac_os_x< 10.14

🔴Vulnerability Details

2
GHSA
GHSA-g8r9-562w-4xxf: A use after free issue was addressed with improved memory management↗2022-05-14
▶
CVEList
CVE-2018-4347: A use after free issue was addressed with improved memory management↗2019-04-03
▶

📋Vendor Advisories

6
Apple
CVE-2018-4347: iCloud for Windows 7.7↗2018-10-08
▶
Apple
CVE-2018-4347: macOS Mojave 10.14↗2018-09-24
▶
Apple
CVE-2018-4347: iOS 12↗2018-09-17
▶
Apple
CVE-2018-4347: tvOS 12↗2018-09-17
▶
Apple
CVE-2018-4347: watchOS 5↗2018-09-17
▶
CVE-2018-4347 — Use After Free in Apple Icloud | cvebase