PT-2021-18873 · Apple · Apple Macos

Hjy79425575 · Published 2021-07-21 · Updated 2021-09-15 · CVE-2021-30790

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.5 Security Update 2021-004 Catalina Security Update 2021-005 Mojave

Description An information disclosure issue was addressed by removing the vulnerable code. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Recommendations For macOS versions prior to Big Sur 11.5, update to macOS Big Sur 11.5. For Catalina, apply Security Update 2021-004. For Mojave, apply Security Update 2021-005.

Fix

Related Identifiers

CVE-2021-30790

ZDI-21-949

ZDI-21-950

Affected Products

Apple Macos

References · 9

• https://support.apple.com/en-us/HT212603 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30790 · Vendor Advisory
• https://support.apple.com/en-us/HT212602 · Vendor Advisory
• https://support.apple.com/en-us/HT212600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30790 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-950 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-949 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30790 · Note
• https://support.apple.com/en-us/102849 · Note