Every CVE Search/ Get API key

CVE-2018-4407

A memory corruption issue was addressed with improved validation. This issue affected versions...

8.8 HighPublic exploit

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

21.4%Up 20.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Record
CVE-2018-4407
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Record
CVE-2018-4407
Updated
2026-11-02
EUVDEUVD-2018-16193 No score

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Record
EUVD-2018-16193
Updated
2026-11-03
GitHub AdvisoriesGHSA-pcv9-8r98-7p98 8.8

A memory corruption issue was addressed with improved validation. This issue affected versions...

A memory corruption issue was addressed with improved validation. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Record
GHSA-pcv9-8r98-7p98
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHub5431/CVE-2018-44072019-04-28
PoC in GitHubFans0n-Fan/CVE-2018-44072020-08-24
PoC in GitHubPa55w0rd/check_icmp_dos2018-11-01
PoC in GitHubSamDecrock/node-cve-2018-44072018-11-02
PoC in GitHubWyAtu/CVE-2018-44072018-11-02
PoC in GitHubanonymouz4/Apple-Remote-Crash-Tool-CVE-2018-44072018-11-07
PoC in GitHubfarisv/AppleDOS2018-11-02
PoC in GitHublucagiovagnoli/CVE-2018-44072018-11-04
PoC in GitHubpwnhacker0x18/iOS-Kernel-Crash2019-11-12
PoC in GitHubr3dxpl0it/CVE-2018-44072018-11-04
Show 5 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubs2339956/check_icmp_dos-CVE-2018-4407-2018-11-02
PoC in GitHubszabo-tibor/CVE-2018-44072024-04-10
PoC in GitHubunixpickle/cve-2018-44072018-11-01
PoC in GitHubzeng9t/CVE-2018-4407-iOS-exploit2018-12-31
PoC in GitHubzteeed/CVE-2018-4407-IOS2018-11-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-4407 is a high vulnerability (CVSS 8.8) in Apple Tvos, published April 3, 2019. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.4%, the 97th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open