← CVE Intelligence

CVE-2018-4302

Apple / iOS PUBLISHED

Description (CNA)

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Affected (CNA)

Vendor / productVersions
Apple / iOSaffected unspecified before 11
Apple / watchOSaffected unspecified before 4
Apple / iTunes for Windowsaffected unspecified before 12.7
Apple / iCloud for Windowsaffected unspecified before 7.0
Apple / macOSaffected unspecified before 10.13

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.