CVE-2018-4269

iTunes: A memory corruption issue was addressed with improved input validation.

CVE-2018-4269 is fixed in iTunes on 1 platform by iTunes 12.11.4.15 (version 12.11.4.15), released August 4, 2021. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.6
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0097
62nd percentile

A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

Where it's fixed

ProductFixed inFixReleased
Windows apps
iTunes 12.11.4.15 iTunes 12.11.4.15 Aug 4, 2021