VULNERABILITY INTELLIGENCE
CVE-2018-4208
CVSS score8.8 HIGH
EPSS probability2.06%
CISA KEVNot currently listed
Published2019-01-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@apple.com — Third Party Advisory
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com — Vendor Advisory
- product-security@apple.com
- product-security@apple.com
- product-security@apple.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108