PT-2021-6924 · Apple+8 · Watchos+14
Jianjun Dai
·
Published
2021-08-24
·
Updated
2022-05-10
·
CVE-2021-30953
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
tvOS versions prior to 15.2
macOS Monterey versions prior to 12.1
Safari versions prior to 15.2
iOS versions prior to 15.2
iPadOS versions prior to 15.2
watchOS versions prior to 8.3
Description
The issue is related to an out-of-bounds read and can be exploited by a remote attacker, allowing them to execute arbitrary code when processing maliciously crafted web content. This can occur due to insufficient bounds checking, which has been improved in the fixed versions.
Recommendations
For tvOS versions prior to 15.2, update to tvOS 15.2 or later.
For macOS Monterey versions prior to 12.1, update to macOS Monterey 12.1 or later.
For Safari versions prior to 15.2, update to Safari 15.2 or later.
For iOS versions prior to 15.2, update to iOS 15.2 or later.
For iPadOS versions prior to 15.2, update to iPadOS 15.2 or later.
For watchOS versions prior to 8.3, update to watchOS 8.3 or later.
Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Ios
Ipados
Macos Monterey
Tvos
Watchos