Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-4302

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Window

Description

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple iOS

  • unspecified to < 11affected

Apple watchOS

  • unspecified to < 4affected

Apple iTunes for Windows

  • unspecified to < 12.7affected

Apple iCloud for Windows

  • unspecified to < 7.0affected

Apple macOS

  • unspecified to < 10.13affected

References