CVE-2018-4429: Input Validation

Reference Links

• https://support.apple.com/en-us/HT209340 (Advisory)
• https://support.apple.com/en-us/HT209343 (Advisory)
• https://support.apple.com/kb/HT209340
• https://support.apple.com/kb/HT209343

Parent vulnerabilities

(Appears in the following advisories)

• HT209343
• HT209340

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-4303
• CVE-2018-4427
• CVE-2018-4431
• CVE-2018-4448
• CVE-2018-4460
• CVE-2018-4447
• CVE-2018-4435
• CVE-2018-4461
• CVE-2018-4429
• CVE-2018-4436
• CVE-2018-4437
• CVE-2018-4464
• CVE-2018-4441
• CVE-2018-4442
• CVE-2018-4443
• CVE-2018-4438
• CVE-2018-4465
• CVE-2018-4430
• CVE-2018-4446
• CVE-2018-4439
• CVE-2018-4440
• CVE-2018-4445
• CVE-2018-4428
• CVE-2018-4444

Frequently Asked Questions

• What is CVE-2018-4429?

  CVE-2018-4429 is a vulnerability that allows for spoofing URLs in iOS and watchOS devices.

• What is the severity of CVE-2018-4429?

  CVE-2018-4429 has a severity rating of 6.5 (Medium).

• How does CVE-2018-4429 affect Apple iOS and watchOS?

  CVE-2018-4429 affects versions prior to iOS 12.1.1 and watchOS 5.1.2.

• How can I fix CVE-2018-4429?

  To fix CVE-2018-4429, update your iOS device to version 12.1.1 or later and update your watchOS device to version 5.1.2 or later.

• Where can I find more information about CVE-2018-4429?

  You can find more information about CVE-2018-4429 on the Apple support website.