medium5.5
CVE-2021-1740
A parsing issue in the handling of directory paths was addressed with improved path validation.
Impact
A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.5 |
| Apple | Iphone Os | before 14.5 |
| Apple | Mac Os X | from 10.15 through 10.15.5 Versions 10.15.6, 10.15.7 |
| Apple | Macos | from 11.0 before 11.3 |
| Apple | Tvos | before 14.5 |
| Apple | Watchos | before 7.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326