PT-2021-6066 · Apple+7 · Ipados+11

Peter Nguyen Vu Hoang · Published 2021-09-20 · Updated 2022-07-01 · CVE-2021-30836

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.8 iPadOS versions prior to 14.8 tvOS versions prior to 15 watchOS versions prior to 8 iOS versions prior to 15 iPadOS versions prior to 15 WebKitGTK (affected versions not specified) WPE WebKit (affected versions not specified)

Description The issue is related to an out-of-bounds read in memory, which can be exploited by processing a maliciously crafted audio file, potentially disclosing restricted memory. This can allow an attacker to gain unauthorized access to protected information.

Recommendations For iOS versions prior to 14.8, update to iOS 14.8 or later. For iPadOS versions prior to 14.8, update to iPadOS 14.8 or later. For tvOS versions prior to 15, update to tvOS 15 or later. For watchOS versions prior to 8, update to watchOS 8 or later. For iOS versions prior to 15, update to iOS 15 or later. For iPadOS versions prior to 15, update to iPadOS 15 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for WebKitGTK and WPE WebKit.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2022:1777

ALT-PU-2021-3571

ALT-PU-2022-2162

BDU:2022-00665

CESA-2022_1777

CVE-2021-30836

DSA-4975-1

DSA-4976-1

OPENSUSE-SU-2022:0182-1

OPENSUSE-SU-2022_0182-1

OPENSUSE-SU-2022_0182-2

RHSA-2022:1777

RHSA-2022_1777

RHSA-2025:10364

RLSA-2022:1777

SUSE-SU-2022:0142-1

SUSE-SU-2022:0182-1

SUSE-SU-2022:0182-2

SUSE-SU-2022:0183-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Apple Macos

Red Hat

Rocky Linux

Suse

Ios

Ipados

Tvos

Watchos

References · 188

• 🔥 https://github.com/springsec/CVE-2022-22620 · Exploit
• 🔥 https://github.com/kmeps4/CVE-2022-22620 · Exploit
• 🔥❌ https://github.com/PeterMxx/ps4_8.00_vuln_poc · Exploit, Deleted
• https://osv.dev/vulnerability/ALSA-2022:1777 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-30836 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1777.html · Vendor Advisory
• https://support.apple.com/kb/HT212869 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4976-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00665 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-30836 · Vendor Advisory
• https://support.apple.com/en-us/HT212814 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30836 · Vendor Advisory
• https://support.apple.com/en-us/HT212815 · Vendor Advisory
• https://support.apple.com/en-us/HT212807 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4975-1 · Vendor Advisory