{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"product-security@apple.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*","matchCriteriaId":"B0B9799C-6891-4D51-9E17-92D1407740F9","versionEndExcluding":"10.13.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the \"Bluetooth\" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app that leverages device properties."},{"lang":"es","value":"Se ha descubierto un problema en algunos productos Apple. Las versiones de macOS anteriores a la 10.13.5 se han visto afectadas. El problema implica el componente \"Bluetooth\". Permite que los atacantes obtengan información sensible del diseño de memoria del kernel mediante una aplicación manipulada que aprovecha las propiedades del dispositivo."}],"id":"CVE-2018-4171","lastModified":"2026-06-17T01:58:29.697","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":7.1,"confidentialityImpact":"COMPLETE","integrityImpact":"NONE","vectorString":"AV:N/AC:M/Au:N/C:C/I:N/A:N","version":"2.0"},"exploitabilityScore":8.6,"impactScore":6.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-06-08T18:29:00.307","references":[{"source":"product-security@apple.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041027"},{"source":"product-security@apple.com","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208849"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1041027"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.apple.com/HT208849"}],"sourceIdentifier":"product-security@apple.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-200"}],"source":"nvd@nist.gov","type":"Primary"}]}