CVE-2018-4437

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-4437
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-4437.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-4437
Downstream
Related
Published
2019-04-03T18:29:15Z
Modified
2025-10-21T04:45:52.568942Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

References

Affected packages

Git / github.com/webkit/webkit

Affected ranges

Type
GIT
Repo
https://github.com/webkit/webkit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
676f488e26ea1f872a9b69756c17d417b5317f52

Affected versions

Safari-606.*

Safari-606.1.26
Safari-606.1.27
Safari-606.1.28
Safari-606.1.28.1
Safari-606.1.29
Safari-606.1.30
Safari-606.1.31
Safari-606.1.32
Safari-606.1.32.1
Safari-606.1.33
Safari-606.1.34
Safari-606.1.35
Safari-606.1.36
Safari-606.2.1
Safari-606.2.100
Safari-606.2.101
Safari-606.2.102
Safari-606.2.103
Safari-606.2.104
Safari-606.3.1
Safari-606.3.2
Safari-606.3.3

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebCore/platform/cocoa/VideoFullscreenModel.h"
        },
        "digest": {
            "line_hashes": [
                "53836477189881582397315793862670904740",
                "320892482022350911577514392805570581256",
                "254226433322567503412799490157202592627",
                "330065992734574058069437848804226355225",
                "193583858729384193107372520401538705476",
                "37084601600199227354494692163004244034",
                "196239925189122413059544919446568192164",
                "58352311303078768038088168350206410473"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-0d2b641e",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebCore/platform/cocoa/VideoFullscreenModelVideoElement.h"
        },
        "digest": {
            "line_hashes": [
                "5870798582894962473799558171415936027",
                "210047560723184381970648090314277431668",
                "321505883024910444521127036553892301509"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-1e91fcf4",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebCore/platform/ios/VideoFullscreenInterfaceAVKit.h"
        },
        "digest": {
            "line_hashes": [
                "70152064588882369854536953690237335037",
                "253769765662655457217216644044689477907",
                "268108951248309397206547245568425514427",
                "166778708244381092185974201905858853291"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-34cac362",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebKit/WebProcess/cocoa/VideoFullscreenManager.h"
        },
        "digest": {
            "line_hashes": [
                "127641225436156348480362648346430846348",
                "216482308379689755144802811391157036997",
                "136543890080769160002167524542358099474",
                "270094089650102475455600108216935541663",
                "191723203284165014625515876816520957709",
                "57006899842197773594362695298941581902"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-44509c83",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebCore/PAL/pal/spi/cocoa/AVKitSPI.h"
        },
        "digest": {
            "line_hashes": [
                "138980348353154221497940777990858990902",
                "215385595635109803843098025239612995386",
                "313788636964897840167354659414417504492",
                "270814623268181502178390329661760763287",
                "260088552200124892321201936538845224162",
                "318648898812350710145347401828312015478",
                "102999418142820897775959554325837135361",
                "17493837090216616587036822985495925484"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-7c437c95",
        "signature_type": "Line",
        "signature_version": "v1"
    },
    {
        "source": "https://github.com/webkit/webkit/commit/676f488e26ea1f872a9b69756c17d417b5317f52",
        "target": {
            "file": "Source/WebKit/UIProcess/Cocoa/VideoFullscreenManagerProxy.h"
        },
        "digest": {
            "line_hashes": [
                "46181676632416092165701609662475984295",
                "234924540605775420412918967381613031328",
                "96987184778456690143891346639556030389",
                "285903465440655483473023364559915499425",
                "102126180594654224225113335403724292000",
                "212073092086576127448880070420862602210",
                "238147365934401294596861665970376507903",
                "174912892342471451606782509345571036188",
                "289334649357804445585393549620877551710",
                "114528743351449095766596065317295111262",
                "81069576794915420473748184656569385651",
                "27541056071451938475979139379347672048",
                "194760983992107901698701336603315390376",
                "262226625992347448214438924988137190067",
                "15020179103485275622751799796668493985",
                "270130073243338516534242778344827382488",
                "179039998586171632590450816772206365663",
                "284075877406139102997248515188450946778",
                "196793503332638748375880734192887303634",
                "286555467196789992114330751546338133150",
                "273312293799939199205320888898712349725",
                "204034651354344610432081212944094484164",
                "99259163585269868613123529085966479245",
                "266249062995263626936773804917581184557",
                "135007175396598713456607462495198573924"
            ],
            "threshold": 0.9
        },
        "deprecated": false,
        "id": "CVE-2018-4437-8ee93724",
        "signature_type": "Line",
        "signature_version": "v1"
    }
]