Medium severity6.5NVD Advisory· Published Apr 3, 2019· Updated Jun 17, 2026

CVE-2018-4273

Description

Multiple memory corruption issues were addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iCloud
cpe:2.3:a:apple:icloud:*:*:*:*:*:*:*:*
Range: <7.6
Apple Inc./iTunes2 versions
cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <12.8
- (no CPE)range: <12.8
Apple Inc./Safari2 versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <11.1.2
- (no CPE)range: <11.1.2
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <11.4.1
Apple Inc./tvOS2 versions
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <11.4.1
- (no CPE)range: <11.4.1
Apple Inc./watchOS2 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <4.3.2
- (no CPE)range: <4.3.2
Apple Inc./iOSllm-fuzzy
Range: <11.4.1
Apple Inc./iCloud for Windowsllm-fuzzy
Range: <7.6
osv-coords17 versions
pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207
< 2.22.4-2.29.3+ 16 more
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.20.5-3.8.1
- (no CPE)range: < 2.20.5-3.8.1
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3
- (no CPE)range: < 2.22.4-2.29.3

Patches

Vulnerability mechanics

References

support.apple.com/kb/HT208932nvdVendor Advisory
support.apple.com/kb/HT208933nvdVendor Advisory
support.apple.com/kb/HT208934nvdVendor Advisory
support.apple.com/kb/HT208935nvdVendor Advisory
support.apple.com/kb/HT208936nvdVendor Advisory
support.apple.com/kb/HT208938nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000