CVE-2018-4385: Input Validation
Published Oct 30, 2018
·Updated
WebKit. A logic issue was addressed with improved state management.
Other sources
A logic issue was addressed with improved state management. This issue affected versions prior to iOS 12.1.
Credit
an anonymous researcher
Affected Software
2 affected componentsFixes available
Apple iOS and iPadOS<12.1
12.1
iPhone OS<12.1
Event History
Apr 3, 2019
CVE Published
via MITRE·05:43 PM
Data Sourced
via MITRE·05:43 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4384
- CVE-2018-4339
- CVE-2018-4365
- CVE-2018-4398
- CVE-2018-4366
- CVE-2018-4367
- CVE-2018-4394
- CVE-2018-4427
- CVE-2018-4371
- CVE-2018-4420
- CVE-2018-4413
- CVE-2018-4419
- CVE-2018-4381
- CVE-2018-4390
- CVE-2018-4391
- CVE-2018-4369
- CVE-2018-4388
- CVE-2018-4374
- CVE-2018-4377
- CVE-2018-4400
- CVE-2018-4387
- CVE-2018-4385
- CVE-2018-4372
- CVE-2018-4373
- CVE-2018-4375
- CVE-2018-4376
- CVE-2018-4382
- CVE-2018-4386
- CVE-2018-4392
- CVE-2018-4416
- CVE-2018-4409
- CVE-2018-4378
- CVE-2018-4368
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2018-4385.
2
What is the severity level of CVE-2018-4385?
The severity level of CVE-2018-4385 is medium with a CVSS score of 6.5.
3
Which software versions are affected by CVE-2018-4385?
Versions prior to iOS 12.1 are affected by CVE-2018-4385.
4
How was CVE-2018-4385 addressed?
CVE-2018-4385 was addressed with improved state management.
5
Where can I find more information about CVE-2018-4385?
You can find more information about CVE-2018-4385 on the Apple support page: [https://support.apple.com/kb/HT209192](https://support.apple.com/kb/HT209192).