CVE-2018-4124 | BDVDB-2026-98730 Detail

Description#

An issue was discovered in certain Apple products. iOS before 11.2.6 is affected. macOS before 10.13.3 Supplemental Update is affected. tvOS before 11.2.6 is affected. watchOS before 4.2.3 is affected. The issue involves the "CoreText" component. It allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via a crafted string containing a certain Telugu character.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.apple.com/HT208534
https://support.apple.com/HT208537
https://support.apple.com/HT208535
http://www.securitytracker.com/id/1040396
https://nakedsecurity.sophos.com/2018/02/20/apple-fixes-that-1-character-to-crash-your-mac-and-iphone-bug/
https://support.apple.com/HT208536

Exploit#

No public exploit known

History#

Version 12018-04-03Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.