CVE-2018-4323: Buffer Overflow

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-4323.

Q: What is the severity of CVE-2018-4323?

The severity of CVE-2018-4323 is high.

Q: Which software and versions are affected by CVE-2018-4323?

Versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7 are affected by CVE-2018-4323.

Q: How can I fix CVE-2018-4323?

To fix CVE-2018-4323, update to iOS 12 or later, tvOS 12 or later, Safari 12 or later, iTunes 12.9 or later for Windows, iCloud for Windows 7.7 or later.

Q: Where can I find more information about CVE-2018-4323?

You can find more information about CVE-2018-4323 in the following references: [link1](https://support.apple.com/kb/HT209106), [link2](https://support.apple.com/kb/HT209107), [link3](https://support.apple.com/kb/HT209109).

Published Sep 12, 2018

Updated

Last updated 25 August 2025

Other sources

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

— Launchpad

WebKit. Multiple memory corruption issues were addressed with improved memory handling.

Credit

Samuel Groβ (saelo)(Trend Micro's Zero Day Initiative), Ivan Fratric(Google Project Zero), team (@bkth_ @5aelo @_niklasb)@@phoenhex(Trend Micro's Zero Day Initiative), Samuel Groß@@5aelo, William Bowling@@wcbowling, Samuel Groβ (saelo)(Trend Micro), team (@bkth_ @5aelo @_niklasb)@@phoenhex(Trend Micro)

Affected Software

15 affected componentsFixes available

Apple tvOS<12

Apple iCloud for Windows<7.7

7.7

Apple iTunes for Windows<12.9

12.9

Apple Safari<12

Apple iOS<12

Apple Safari<12

Apple iPhone OS<12.0

Apple tvOS<12

All of the following

Any of the following

Apple iCloud<7.7

Apple iTunes<12.9

Microsoft Windows

Apple iCloud<7.7

Apple iTunes<12.9

Microsoft Windows

debian/webkit2gtk

2.44.2-1~deb11u12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-1

Event History

Apr 3, 2019

CVE Published

via MITRE·05:43 PM

Data Sourced

via MITRE·05:43 PM

DescriptionWeakness

Data Sourced

via NVD·06:29 PM

DescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·11:05 PM

Description

Feb 20, 2026

Data Sourced

via Ubuntu·08:01 PM

RemedyDescriptionSeverityAffected Software

Data Sourced

via Debian·08:01 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2018-4323.

What is the severity of CVE-2018-4323?

The severity of CVE-2018-4323 is high.

Which software and versions are affected by CVE-2018-4323?

Versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7 are affected by CVE-2018-4323.

How can I fix CVE-2018-4323?

To fix CVE-2018-4323, update to iOS 12 or later, tvOS 12 or later, Safari 12 or later, iTunes 12.9 or later for Windows, iCloud for Windows 7.7 or later.

Where can I find more information about CVE-2018-4323?

You can find more information about CVE-2018-4323 in the following references: [link1](https://support.apple.com/kb/HT209106), [link2](https://support.apple.com/kb/HT209107), [link3](https://support.apple.com/kb/HT209109).

CVE-2018-4323: Buffer Overflow

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the vulnerability ID for this issue?

What is the severity of CVE-2018-4323?

Which software and versions are affected by CVE-2018-4323?

How can I fix CVE-2018-4323?

Where can I find more information about CVE-2018-4323?

Company

Resources

Contact