CVE-2018-4094: Buffer Overflow
An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability identifier for this issue?
The vulnerability identifier for this issue is CVE-2018-4094.
Which Apple products are affected by this vulnerability?
This vulnerability affects certain Apple products, including Apple iPhone OS before 11.2.5, Apple Mac OS X before 10.13.3, Apple iOS before 11.2.5, and Apple watchOS before 4.2.2.
What is the severity of CVE-2018-4094?
The severity of CVE-2018-4094 is high with a severity value of 7.8.
What is the component involved in this vulnerability?
The component involved in this vulnerability is the "Audio" component.
How can this vulnerability be exploited?
This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service.