Findings

CVE-2018-4344

Apple Multiple Products Memory Corruption Vulnerability

Published Apr 3, 2019 · updated Jun 16, 2026 · apple iphone os

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 3, 2019 · Catalog

    Detected

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

  2. Jun 27, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jul 18, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Required action

Apply updates per vendor instructions.

CISA due date Jul 18, 2022

Affected

  • cpe apple/iphone osversion unspecified
  • cpe apple/mac os xversion unspecified
  • cpe apple/tvosversion unspecified
  • cpe apple/watchosversion unspecified
  • vendor Apple Multiple Productsversion unspecified

Sources

  • CISA KEVCVE-2018-4344

    Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.

    cisa.gov
  • CVE.orgCVE-2018-4344

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-4344

    30-day exploitation probability 2.4%

    first.org
  • NIST NVDCVE-2018-4344

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

    nvd.nist.gov

References

CVE-2018-4344 · ZeroDay Findings