← Back

CVE-2021-30785

nvd nist
Published: Sep 8, 2021Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected (14)

Apple
5 products
Iphone Os
Mac Os X
Macos
Tvos
Watchos
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Iphone Os
Before 14.7
Apple
Mac Os X
From 10.15 to 10.15.6
Mac Os X
Version 10.15.7
Mac Os X
Version 10.15.7 security_update_2020-001
Mac Os X
Version 10.15.7 security_update_2020-005
Mac Os X
Version 10.15.7 security_update_2020-007
Mac Os X
Version 10.15.7 security_update_2020
Mac Os X
Version 10.15.7 security_update_2021-001
Mac Os X
Version 10.15.7 security_update_2021-002
Mac Os X
Version 10.15.7 security_update_2021-003
Mac Os X
Version 10.15.7 supplemental_update
Macos
Before 11.5
Tvos
Before 14.7
Watchos
Before 7.6

Related CWEs

CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (12)

Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Release NotesVendor Advisory
Source: product-security@apple.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.