PT-2021-18907 · Apple · Apple Macos

Peter Nguyen Vu Hoang · Published 2021-09-13 · Updated 2022-10-11 · CVE-2021-30844

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.6 macOS Catalina versions prior to Security Update 2021-005

Description A logic issue was addressed with improved state management, allowing a remote attacker to potentially leak memory.

Recommendations For macOS Catalina, apply Security Update 2021-005 to resolve the issue. For macOS Big Sur, update to version 11.6 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the issue is resolved.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2021-30844

Affected Products

Apple Macos

References · 11

• https://support.apple.com/en-us/HT212804 · Vendor Advisory
• https://support.apple.com/en-us/HT212805 · Vendor Advisory
• https://support.apple.com/kb/HT212871 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30844 · Security Note
• https://support.apple.com/kb/HT212872 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30844 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30844 · Note
• https://support.apple.com/en-us/103164 · Note
• https://support.apple.com/en-us/HT212872 · Note
• https://t.me/cvenotify/30766 · Telegram Post
• https://support.apple.com/en-us/103147 · Note