PT-2021-6567 · Apple+8 · Ipados+14

Samuel Gross · Published 2021-08-24 · Updated 2023-01-09 · CVE-2021-30851

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safari version 15 tvOS version 15 watchOS version 8 iOS version 15 iPadOS version 15

Description A memory corruption issue was addressed with improved locking. Processing maliciously crafted web content may lead to code execution. The vulnerability is related to the WebKit modules, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For Safari version 15, update to this version to resolve the issue. For tvOS version 15, update to this version to resolve the issue. For watchOS version 8, update to this version to resolve the issue. For iOS version 15, update to this version to resolve the issue. For iPadOS version 15, update to this version to resolve the issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2022:1777

BDU:2022-01833

CESA-2022_1777

CVE-2021-30851

DSA-4995-1

DSA-4996-1

MGASA-2021-0498

OPENSUSE-SU-2021:1557-1

OPENSUSE-SU-2021:3874-1

OPENSUSE-SU-2021_1557-1

OPENSUSE-SU-2021_3874-1

OPENSUSE-SU-2022:0182-1

OPENSUSE-SU-2022_0182-1

OPENSUSE-SU-2022_0182-2

RHSA-2022:1777

RHSA-2022_1777

RHSA-2025:10364

RLSA-2022:1777

SUSE-SU-2021:3769-1

SUSE-SU-2021:3861-1

SUSE-SU-2021:3874-1

SUSE-SU-2022:0142-1

SUSE-SU-2022:0182-1

SUSE-SU-2022:0182-2

SUSE-SU-2022:0183-1

USN-5127-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Apple Macos

Red Hat

Rocky Linux

Safari

Suse

Ubuntu

Webkit

Ios

Ipados

Tvos

Watchos

References · 203

• 🔥 https://github.com/springsec/CVE-2022-22620 · Exploit
• 🔥 https://github.com/kmeps4/CVE-2022-22620 · Exploit
• 🔥❌ https://github.com/PeterMxx/ps4_8.00_vuln_poc · Exploit, Deleted
• https://advisories.mageia.org/MGASA-2021-0498.html · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3769-1 · Vendor Advisory
• https://debian.org/security/2021/dsa-4995 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1777.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1777 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30851 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-30851 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2021:3861-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3874-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01833 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2021:1557-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0182-2 · Vendor Advisory