CVE-2021-30952

Published: Aug 24, 2021Modified: Jun 17, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (12)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux · +2 more

Show all products

Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux · Webkitgtk: Webkitgtk · Wpewebkit: Wpe Webkit

6 products

1 product

1 product

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.2
Apple Iphone Os	Before 15.2
Apple Macos	From 12.0 to 12.1
Apple Safari	Before 15.2
Apple Tvos	Before 15.2
Apple Watchos	Before 8.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34
Fedoraproject Fedora	Version 35

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Webkitgtk Webkitgtk	Before 2.34.4
Wpewebkit Wpe Webkit	Before 2.34.4

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (22)

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: product-security@apple.com

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: product-security@apple.com

Broken Link

https://support.apple.com/en-us/HT212975

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212976

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212978

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212980

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212982

Source: product-security@apple.com

Release NotesVendor Advisory

https://www.debian.org/security/2022/dsa-5060

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://www.debian.org/security/2022/dsa-5061

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://support.apple.com/en-us/HT212975

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212976

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212978

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212980

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://support.apple.com/en-us/HT212982

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

https://www.debian.org/security/2022/dsa-5060

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://www.debian.org/security/2022/dsa-5061

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitThird Party Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30952

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.