PT-2021-5765 · Apple+8 · Security Update+11
Sergei Glazunov
·
Published
2021-07-09
·
Updated
2024-06-15
·
CVE-2021-30799
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
iOS versions prior to 14.7
macOS Big Sur versions prior to 11.5
Security Update versions prior to 2021-004 Catalina
Security Update versions prior to 2021-005 Mojave
Description
The issue is related to multiple memory corruption problems that have been addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The vulnerability is also associated with a buffer overflow issue in WebKitGTK and WPE WebKit modules, which can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service using malicious web content.
Recommendations
For iOS versions prior to 14.7, update to iOS 14.7 or later.
For macOS Big Sur versions prior to 11.5, update to macOS Big Sur 11.5 or later.
For Security Update versions prior to 2021-004 Catalina, apply Security Update 2021-004 or later.
For Security Update versions prior to 2021-005 Mojave, apply Security Update 2021-005 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Security Update
Suse
Ubuntu
Ios
Macos Big Sur