CVE-2021-30953

Published: Aug 24, 2021Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (10)

Products: Apple: Ipados, Iphone Os, Macos, Safari, Tvos, Watchos · Fedoraproject: Fedora · Debian: Debian Linux

6 products

1 product

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.2
Apple Iphone Os	Before 15.2
Apple Macos	From 12.0.0 to 12.1
Apple Safari	Before 15.2
Apple Tvos	Before 15.2
Apple Watchos	Before 8.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 34

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (20)

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: product-security@apple.com

https://support.apple.com/en-us/HT212975

Source: product-security@apple.com

https://support.apple.com/en-us/HT212976

Source: product-security@apple.com

https://support.apple.com/en-us/HT212978

Source: product-security@apple.com

https://support.apple.com/en-us/HT212980

Source: product-security@apple.com

https://support.apple.com/en-us/HT212982

Source: product-security@apple.com

https://www.debian.org/security/2022/dsa-5060

Source: product-security@apple.com

https://www.debian.org/security/2022/dsa-5061

Source: product-security@apple.com

http://www.openwall.com/lists/oss-security/2022/01/21/2

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212975

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212976

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212978

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212980

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/en-us/HT212982

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2022/dsa-5060

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.debian.org/security/2022/dsa-5061

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.