PT-2021-18956 · Apple · Apple Macos+4

Mickey Jin

+1

·

Published

2021-08-24

·

Updated

2023-01-09

·

CVE-2021-30905

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 15.1 Apple iPadOS versions prior to 15.1 Apple macOS versions prior to Monterey 12.0.1 Apple tvOS versions prior to 15.1 Apple watchOS versions prior to 8.1 Apple macOS (Security Update 2021-007 Catalina and earlier)
Description An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted file may disclose user information.
Recommendations For Apple iOS versions prior to 15.1, update to iOS 15.1 or later. For Apple iPadOS versions prior to 15.1, update to iPadOS 15.1 or later. For Apple macOS versions prior to Monterey 12.0.1, update to macOS Monterey 12.0.1 or later. For Apple tvOS versions prior to 15.1, update to tvOS 15.1 or later. For Apple watchOS versions prior to 8.1, update to watchOS 8.1 or later. For Apple macOS using Security Update 2021-007 Catalina or earlier, apply Security Update 2021-007 Catalina or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-30905
ZDI-21-1368

Affected Products

Apple Macos
Ios
Ipados
Tvos
Watchos