CVE-2018-4253 in macOS

Summary

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "AMD" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (out-of-bounds read of kernel memory) via a crafted app.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 01/02/2018
• Disclosure: 06/08/2018
• Moderation: VulDB entry created
• Entries: VDB-118643 (1)
• CPE: ready
• CWE: CWE-125 (Confirmed)
• CVSS: 5.4
• EPSS: 0.00130
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-4253
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-4253
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-4253/