Skip to content
OpenAdvisories
Unscored CVE-2018-4302 EUVD-2018-16088GHSA-2573-rpmq-pq99

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, …

Published Dec 23, 2021 · Updated Aug 5, 2024 · Assigned by apple

Description

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < 11 11
Apple watchOS unspecified – < 4 4
Apple iTunes for Windows unspecified – < 12.7 12.7
Apple iCloud for Windows unspecified – < 7.0 7.0
Apple macOS unspecified – < 10.13 10.13

References