{"id":"CVE-2018-4282","aliases":["EUVD-2018-16068","GHSA-hm2w-gj6x-7h5r"],"status":"published","title":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...","description":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00349,"percentile":0.28731,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2019-04-03T17:43:13Z","modified":"2026-06-17T01:58:43Z","products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/kb/HT208938","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT208935","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT208936","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4282"},{"url":"https://github.com/advisories/GHSA-hm2w-gj6x-7h5r"}],"sources":{"cve":[{"id":"CVE-2018-4282","description":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.","status":"published","published":"2019-04-03T17:43:13Z","modified":"2024-08-05T05:11:22.155Z","updated_at":"2026-11-02T14:35:08.024147Z"}],"euvd":[{"id":"EUVD-2018-16068","description":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.","status":"published","published":"2019-04-03T17:43:13Z","modified":"2024-08-05T05:11:22Z","updated_at":"2026-11-03T02:40:13.563498Z"}],"ghsa":[{"id":"GHSA-hm2w-gj6x-7h5r","title":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was...","description":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.","status":"published","published":"2022-05-14T01:12:48Z","modified":"2023-02-02T05:03:26Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:38.289817Z"}],"nvd":[{"id":"CVE-2018-4282","description":"An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2.","status":"published","published":"2019-04-03T18:29:05.157Z","modified":"2026-06-17T01:58:43.22Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:55.136632Z"}]}}