CVE-2018-4210: apple iphone_os Improper Validation of Array Index

Vulnerability summary

CVE-2018-4210 is a high (CVSS 8.8) Improper Validation of Array Index vulnerability in apple iphone_os. EPSS estimates a 2.25% chance of exploitation in the next 30 days, higher than 82.5% of scored vulnerabilities.

Timeline

1. 11-01-2019
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

In iOS before 11.3, Safari before 11.1, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, an array indexing issue existed in the handling of a function in javascript core. This issue was addressed with improved checks.

• CWE-129Improper Validation of Array IndexThe product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.