PT-2021-4468 · Apple · Watchos+6

Published 2021-08-24 · Updated 2025-12-27 · CVE-2021-30883

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions iOS versions prior to 15.0.2 iPadOS versions prior to 15.0.2 macOS Monterey versions prior to 12.0.1 iOS versions prior to 14.8.1 iPadOS versions prior to 14.8.1 tvOS versions prior to 15.1 watchOS versions prior to 8.1 macOS Big Sur versions prior to 11.6.1

Description The issue is a memory corruption problem caused by improved memory handling. Reports indicate that this issue may have been actively exploited. An application may be able to execute arbitrary code with kernel privileges. The vulnerability allows for potential privilege escalation. There have been reports of the vulnerability being used to jailbreak devices and is associated with the identifier CVE-2021-30883.

Recommendations Update iOS to version 15.0.2 or later. Update iPadOS to version 15.0.2 or later. Update macOS Monterey to version 12.0.1 or later. Update iOS to version 14.8.1 or later. Update iPadOS to version 14.8.1 or later. Update tvOS to version 15.1 or later. Update watchOS to version 8.1 or later. Update macOS Big Sur to version 11.6.1 or later.

Fix

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

BDU:2021-05101

CVE-2021-30883

Affected Products

Apple Macos

Ios

Ipados

Macos Big Sur

Macos Monterey

Tvos

Watchos

References · 34

• https://osv.dev/vulnerability/CVE-2021-30883 · Vendor Advisory
• https://support.apple.com/en-us/HT212874 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05101 · Security Note
• https://support.apple.com/en-us/HT212869 · Vendor Advisory
• https://support.apple.com/en-us/HT212872 · Vendor Advisory
• https://support.apple.com/en-us/HT212876 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-30883 · Security Note
• https://support.apple.com/en-us/HT212846 · Vendor Advisory
• https://support.apple.com/en-us/HT212868 · Vendor Advisory
• https://t.me/aptreports/1121 · Telegram Post
• https://t.me/true_secator/3099 · Telegram Post
• https://t.me/cveNotify/140062 · Telegram Post
• https://twitter.com/minacris_/status/1924887200170172885 · Twitter Post
• https://t.me/cybersecuritytechnologies/4497 · Telegram Post
• ❌ https://github.com/jonathandata1/ios_15_rce · Note, Deleted