CVE-2018-4302

State: Published
Severity: Not scored
Published: Dec 23, 2021
Updated: Aug 5, 2024
Reserved: Jan 2, 2018

Description

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
iOSApple	before 11Affected
watchOSApple	before 4Affected
iTunes for WindowsApple	before 12.7Affected
iCloud for WindowsApple	before 7.0Affected
macOSApple	before 10.13Affected

References

https://support.apple.com/en-us/HT208144
https://support.apple.com/en-us/HT208112
https://support.apple.com/en-us/HT208115
https://support.apple.com/en-us/HT208141
https://support.apple.com/en-us/HT208142

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.