CVE-2018-4191

CVE-2018-4191 is a memory corruption issue that Apple fixed by improving input/memory validation. Affects older releases prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7. Apple security notes enumerate multiple components (CFNetwork, CoreFoundati...

CVE-2018-4203

CVE-2018-4203 describes an out-of-bounds read that was addressed by improved bounds checking. The Apple advisories indicate this affected multiple platforms prior to updates: iOS before 12, macOS Mojave 10.14, tvOS 12, and watchOS 5. The Red Hat entry reiterates the same issue and scope. Remediat...

CVE-2018-4203

An out-of-bounds read was addressed with improved bounds checking. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2017-7151

CVE-2017-7151 is a race condition addressed by Apple through additional validation, affecting multiple Apple platforms prior to their updates (iOS 11.2, macOS High Sierra 10.13.2/10.13.4, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows). The connected Apple advisories attribute the CVE to CoreF...

CVE-2018-4191

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4145

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 11.3, tvOS 11.3, watchOS 4.3, Safari 11.1, iTunes 12.7.4 for Windows, iCloud for Windows 7.4...

CVE-2018-4197

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4197

CVE-2018-4197 is a WebKit/use-after-free vulnerability that was addressed by Apple through memory-management fixes. It affected multiple Apple platforms and products, specifically iOS versions prior to 12, tvOS prior to 12, Safari prior to 12, and Windows components (iTunes 12.9 for Windows and i...

CVE-2018-4145

CVE-2018-4145 is a memory-corruption vulnerability reported across Apple products. The consolidated description spans iOS, tvOS, watchOS, Safari, iTunes for Windows, and iCloud for Windows, indicating multiple memory corruption issues addressed through improved memory handling. Affected versions ...

CVE-2018-4126

CVE-2018-4126 is an Apple memory-corruption issue affecting CFNetwork (and related memory handling paths) prior to the iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5, iTunes 12.9 for Windows, and iCloud for Windows 7.7 releases. The description in the initial entry states a memory corruption vuln...

CVE-2018-4197

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-4191

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, tvOS 12, watchOS 5, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

About the security content of tvOS 11 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2018-4344

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2018-4407

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5...

CVE-2018-4407

CVE-2018-4407 is grounded in a heap-based memory corruption in Apple XNU’s AWDL path. The bug arises in IO80211AWDLPeer::parseAwdlSyncTreeTLV: TLV type 0x14 (SyncTree TLV) can overflow the 60-byte sync_tree_macs buffer into the adjacent heap, due to the TLV length being capped at 1024 but copied ...

About the security content of tvOS 12.2

About the security content of tvOS 12.2 This document describes the security content of tvOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

CVE-2019-6234

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6234

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6224

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution...