Security Vulnerabilities fixed in iTunes HT208694

Description

A buffer overflow was addressed with improved size validation. Multiple memory corruption issues were addressed with improved memory handling. An array indexing issue existed in the handling of a function in javascript core. This issue was addressed through improved checks. A memory corruption issue was addressed through improved input validation. A cross-origin issue existed with the fetch API. This was addressed through improved input validation.

Affected Applications

iTunes

CVE References

CVE-2018-4144 CVE-2018-4101 CVE-2018-4114 CVE-2018-4118 CVE-2018-4119 CVE-2018-4120 CVE-2018-4121 CVE-2018-4122 CVE-2018-4125 CVE-2018-4127 CVE-2018-4128 CVE-2018-4129 CVE-2018-4130 CVE-2018-4161 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4113 CVE-2018-4146 CVE-2018-4117

Other References

https://support.apple.com/en-us/HT208694.html