CVE-2018-4363 — Improper Input Validation in Apple Tvos

CWE-20 — Improper Input Validation5 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.2%
top 53.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple Iphone OSApple TvosApple Watchos+2 more
Timeline
PublishedApr 3
Latest updateMay 14

Description

An input validation issue existed in the kernel. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDapple/tvos< 12
▶NVDapple/watchos< 5.0
▶Appleapple/tvos12
▶NVDapple/iphone_os< 12.0

🔴Vulnerability Details

1
GHSA
GHSA-grvh-33q9-jjv9: An input validation issue existed in the kernel↗2022-05-14
▶

📋Vendor Advisories

3
Apple
CVE-2018-4363: iOS 12↗2018-09-17
▶
Apple
CVE-2018-4363: tvOS 12↗2018-09-17
▶
Apple
CVE-2018-4363: watchOS 5↗2018-09-17
▶