CVE-2018-4209 In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This iss...
HighCVSS 8.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/webkit2gtk(Debian:12) | < 2.22.0-2 | 2.22.0-2 |
| debian/webkit2gtk(Debian:13) | < 2.22.0-2 | 2.22.0-2 |
| debian/webkit2gtk(Debian:14) | < 2.22.0-2 | 2.22.0-2 |
| apple Safari | < 11.1 | 11.1 |
| apple iphone os | < 11.3 | 11.3 |
| apple tvOS | < 11.3 | 11.3 |
| apple watchOS | < 4.3 | 4.3 |
| apple icloud | < 7.4 | 7.4 |
| apple itunes | < 12.7.4 | 12.7.4 |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| webkitgtk+ | < 2.22.0 | 2.22.0 |
| ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3781-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2018-4209 vendor-advisory
- GLSA-201812-04 third-party-advisory vendor-advisory
- support.apple.com
- support.apple.com vendor-advisory
- support.apple.com
- support.apple.com
- support.apple.com
- support.apple.com
- USN-3781-1 third-party-advisory vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory
- support.apple.com vendor-advisory