Type Confusion Vulnerability in iOS by Apple
CVE-2017-13888

7.5HIGH

Key Information:

Vendor

Apple
Status
iPhone OS
Vendor
CVE Published:
11 January 2019

What is CVE-2017-13888?

A type confusion issue was identified in iOS prior to version 11.2, which could lead to unexpected behavior due to improper memory handling. Apple has addressed this issue with improved memory management techniques, enhancing the overall security and stability of the affected versions of the iOS operating system. Users are encouraged to update their devices to the latest version to mitigate potential risks associated with this vulnerability.

References

https://support.apple.com/HT208334
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2017-13888 : Type Confusion Vulnerability in iOS by Apple