CVE-2018-4253: Input Validation
AMD. An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation.
Other sources
An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4196
- CVE-2018-4253
- CVE-2018-4256
- CVE-2018-4255
- CVE-2018-4254
- CVE-2018-4258
- CVE-2018-4257
- CVE-2018-7584
- CVE-2018-4219
- CVE-2018-5383
- CVE-2018-4171
- CVE-2018-4194
- CVE-2018-4180
- CVE-2018-4181
- CVE-2018-4182
- CVE-2018-4183
- CVE-2018-4478
- CVE-2018-4251
- CVE-2018-4211
- CVE-2018-4229
- CVE-2018-4159
- CVE-2018-4242
- CVE-2018-4202
- CVE-2018-4217
- CVE-2018-4141
- CVE-2018-4228
- CVE-2018-4236
- CVE-2018-4234
- CVE-2018-4249
- CVE-2018-8897
- CVE-2018-4241
- CVE-2018-4243
- CVE-2018-4237
- CVE-2018-4404
- CVE-2018-4227
- CVE-2018-4235
- CVE-2018-4240
- CVE-2018-4230
- CVE-2018-4221
- CVE-2018-4223
- CVE-2018-4224
- CVE-2018-4225
- CVE-2018-4226
- CVE-2018-4184
- CVE-2018-4198
- CVE-2018-4193
Frequently Asked Questions
What is CVE-2018-4253?
CVE-2018-4253 is a vulnerability in certain Apple products, specifically macOS before 10.13.5, that allows local users to bypass memory-read restrictions or cause a denial of service by exploiting an AMD component.
What is the severity of CVE-2018-4253?
The severity of CVE-2018-4253 is rated as high, with a severity value of 5.5.
Which Apple products are affected by CVE-2018-4253?
Certain Apple products are affected by CVE-2018-4253, including macOS before 10.13.5, macOS High Sierra version up to 10.13.5, Sierra, and El Capitan.
How can CVE-2018-4253 be exploited?
CVE-2018-4253 can be exploited by a crafted app to perform an out-of-bounds read of kernel memory and bypass intended memory-read restrictions.
Is there a fix for CVE-2018-4253?
Yes, Apple has addressed the CVE-2018-4253 vulnerability in macOS High Sierra 10.13.5 and provides a security update to fix the issue.