ID:1916 - Exploit for Memory corruption in Apple iOS - CVE-2018-4087

 
Main Vulnerability Database Exploits ID:1916 - Exploit for Memory corruption in Apple iOS - CVE-2018-4087

ID:1916 - Exploit for Memory corruption in Apple iOS - CVE-2018-4087

Published: March 18, 2020


Vulnerability identifier: #VU10206
Vulnerability risk: Low
CVE-ID: CVE-2018-4087
CWE-ID: CWE-119
Exploitation vector: Local access
Vulnerable software:
Apple iOS

Link to public exploit:


Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to boundary error in the Core Bluetooth component. A local attacker can run a specially crafted application, trigger memory corruption and execute arbitrary code with system privileges.

Successful exploitation of the vulnerability may result in system compromise.

Remediation

Update to version 11.2.5.