CVE-2021-30858

Published: Aug 24, 2021Modified: Oct 27, 2025CISA KEV

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected (8)

Products: Apple: Ipados, Iphone Os, Macos · Fedoraproject: Fedora · Debian: Debian Linux

3 products

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	From 13.1 to 14.8
Apple Iphone Os	Before 12.5.5
Apple Iphone Os	From 13.0 to 14.8
Apple Macos	Before 11.6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 33
Fedoraproject Fedora	Version 34

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (37)

http://seclists.org/fulldisclosure/2021/Sep/25

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/27

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/29

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/38

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/39

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/50

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/20/1

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/26/9

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/1

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/2

Source: product-security@apple.com

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/4

Source: product-security@apple.com

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/

Source: product-security@apple.com

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/

Source: product-security@apple.com

Release Notes

https://support.apple.com/en-us/HT212804

Source: product-security@apple.com

Third Party Advisory

https://support.apple.com/en-us/HT212807

Source: product-security@apple.com

Third Party Advisory

https://support.apple.com/kb/HT212824

Source: product-security@apple.com

Third Party Advisory

https://www.debian.org/security/2021/dsa-4975

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://www.debian.org/security/2021/dsa-4976

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/25

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/27

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/29

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/38

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/39

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2021/Sep/50

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2021/09/20/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/26/9

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://www.openwall.com/lists/oss-security/2021/10/27/4

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BO6DMTHZR57JDBOXPSNR2MKDMCRWV265/

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XYNV7ASK4LQVAUMJXNXBS3Z7RVDQ2N3W/

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://support.apple.com/en-us/HT212804

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/en-us/HT212807

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://support.apple.com/kb/HT212824

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2021/dsa-4975

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.debian.org/security/2021/dsa-4976

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30858

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.