CVE-2018-4206

HIGH 7.8CVE-2018-4206 · Published 08/06/2018 · updated 17/06/2026

In short

CVE-2018-4206 is a HIGH (CVSS 7.8) vulnerability affecting apple tv (apple).
Chance of exploitation in the next 30 days (EPSS): 5.0%, higher than 92.2% of all vulnerabilities.
Fix: update to 11.4 or later.

Package	Affected versions	Patched versions
apple tv apple	`< 11.4`	`11.4`

Description

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.

References

securityfocus.com/bid/103957 · Third Party Advisory
securityfocus.com/bid/103958 · Third Party Advisory
securitytracker.com/id/1040744 · Third Party Advisory
bugs.chromium.org/p/project-zero/issues/detail · Exploit
support.apple.com/HT208742 · Vendor Advisory
support.apple.com/HT208743 · Vendor Advisory
support.apple.com/HT208850 · Vendor Advisory
support.apple.com/HT208851 · Vendor Advisory
exploit-db.com/exploits/44562 · Exploit

More vulnerabilities in apple tv

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

apple tv

apple

< 11.4

11.4

Description

More vulnerabilities in apple tv

See all →