CVE-2018-4328: Buffer Overflow

Q: What is the severity of CVE-2018-4328?

The severity of CVE-2018-4328 is high with a severity value of 8.8.

Q: Which software versions are affected by CVE-2018-4328?

Versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7 are affected.

Q: How can I fix CVE-2018-4328?

To fix CVE-2018-4328, update to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, or iCloud for Windows 7.7 or later versions.

Q: Where can I find more information about CVE-2018-4328?

You can find more information about CVE-2018-4328 on Apple's support website: [link](https://support.apple.com/kb/HT209106), [link](https://support.apple.com/kb/HT209107), [link](https://support.apple.com/kb/HT209109).

Q: What is the Common Weakness Enumeration (CWE) ID for CVE-2018-4328?

The CWE ID for CVE-2018-4328 is 119.

Published Sep 12, 2018

Updated

Last updated 25 August 2025

Other sources

Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

— Launchpad

WebKit. Multiple memory corruption issues were addressed with improved memory handling.

Credit

Samuel Groβ (saelo)(Trend Micro's Zero Day Initiative), Ivan Fratric(Google Project Zero), team (@bkth_ @5aelo @_niklasb)@@phoenhex(Trend Micro's Zero Day Initiative), Samuel Groß@@5aelo, William Bowling@@wcbowling, Samuel Groβ (saelo)(Trend Micro), team (@bkth_ @5aelo @_niklasb)@@phoenhex(Trend Micro)

Affected Software

15 affected componentsFixes available

Apple tvOS<12

Apple iCloud for Windows<7.7

7.7

Apple iTunes for Windows<12.9

12.9

Apple Safari<12

Apple iOS<12

Apple Safari<12

Apple iPhone OS<12.0

Apple tvOS<12

Apple iCloud<7.7

Apple iTunes<12.9

Microsoft Windows

debian/webkit2gtk

2.44.2-1~deb11u12.50.4-1~deb11u12.50.4-1~deb12u12.50.4-1~deb13u12.50.5-1

All of the following

Any of the following

Apple iCloud<7.7

Apple iTunes<12.9

Microsoft Windows

Event History

Apr 3, 2019

CVE Published

via MITRE·05:43 PM

Data Sourced

via MITRE·05:43 PM

DescriptionWeakness

Data Sourced

via NVD·06:29 PM

DescriptionSeverityWeaknessAffected Software

Jan 11, 2024

Data Sourced

via Launchpad·11:05 PM

Description

Feb 20, 2026

Data Sourced

via Ubuntu·08:01 PM

RemedyDescriptionSeverityAffected Software

Data Sourced

via Debian·08:01 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2018-4328?

The severity of CVE-2018-4328 is high with a severity value of 8.8.

Which software versions are affected by CVE-2018-4328?

Versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, and iCloud for Windows 7.7 are affected.

How can I fix CVE-2018-4328?

To fix CVE-2018-4328, update to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, or iCloud for Windows 7.7 or later versions.

Where can I find more information about CVE-2018-4328?

You can find more information about CVE-2018-4328 on Apple's support website: [link](https://support.apple.com/kb/HT209106), [link](https://support.apple.com/kb/HT209107), [link](https://support.apple.com/kb/HT209109).

What is the Common Weakness Enumeration (CWE) ID for CVE-2018-4328?

The CWE ID for CVE-2018-4328 is 119.

CVE-2018-4328: Buffer Overflow

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2018-4328?

Which software versions are affected by CVE-2018-4328?

How can I fix CVE-2018-4328?

Where can I find more information about CVE-2018-4328?

What is the Common Weakness Enumeration (CWE) ID for CVE-2018-4328?

Company

Resources

Contact