A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
| Link | Tags |
|---|---|
| https://support.apple.com/HT209446 | vendor advisory |
| https://support.apple.com/HT209443 | vendor advisory |
| https://www.exploit-db.com/exploits/46298/ | third party advisory exploit |
| https://support.apple.com/HT209448 | vendor advisory |
| http://www.securityfocus.com/bid/106739 | vdb entry third party advisory |
| https://support.apple.com/HT209447 | vendor advisory |