CVE-2021-30846

Published: Oct 19, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (10)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Debian: Debian Linux · Fedoraproject: Fedora

6 products

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 14.8
Apple Iphone Os	Before 14.8
Apple Macos	Before 12.0.1
Apple Safari	Before 15.0
Apple Tvos	Before 15.0
Apple Watchos	Before 8.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (36)

http://seclists.org/fulldisclosure/2021/Oct/60

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/61

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/62

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/63

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/26/9

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/1

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/2

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/4

Source: product-security@apple.com

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/

Source: product-security@apple.com

https://support.apple.com/en-us/HT212807

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT212814

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT212815

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT212816

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT212819

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT212869

Source: product-security@apple.com

Vendor Advisory

https://www.debian.org/security/2021/dsa-4995

Source: product-security@apple.com

Third Party Advisory

https://www.debian.org/security/2021/dsa-4996

Source: product-security@apple.com

Third Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/60

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/61

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/62

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Oct/63

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/10/26/9

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212807

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT212814

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT212815

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT212816

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT212819

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT212869

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.debian.org/security/2021/dsa-4995

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4996

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.