First published: Tue Oct 30 2018(Updated: )
Bluetooth. This issue was addressed with a new entitlement.
Credit: Michael Thomas @NSBiscuit product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <12.1 | |
Apple iOS | <12.1 | 12.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2018-4339 is a vulnerability in iOS that allows a local user to read a persistent device identifier.
CVE-2018-4339 was addressed with a new entitlement in iOS 12.1.
The severity of CVE-2018-4339 is medium with a CVSS score of 5.5.
iOS versions up to but not including 12.1 are affected by CVE-2018-4339.
You can find more information about CVE-2018-4339 on the official Apple support page: https://support.apple.com/en-us/HT209192.