PT-2021-18847 · Apple · Imovie

Csaba Fitzl + 6 · Published 2021-09-08 · Updated 2025-07-30 · CVE-2021-30757

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iMovie versions prior to 10.2.4

Description The issue allows a malicious app to potentially use entitlements and privacy permissions granted to the affected software. This could lead to unauthorized access or misuse of sensitive information.

Recommendations For versions prior to 10.2.4, update to version 10.2.4 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and closely monitoring app permissions until the update can be applied.

Fix

Related Identifiers

CVE-2021-30757

Affected Products

Imovie

References · 4

• https://osv.dev/vulnerability/CVE-2021-30757 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30757 · Security Note
• https://support.apple.com/en-us/HT212549 · Vendor Advisory
• https://twitter.com/wtsdev/status/1950360425805066497 · Twitter Post