medium6.5
CVE-2021-1811
A logic issue was addressed with improved state management.
Impact
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Icloud | before 12.3 |
| Apple | Itunes | before 12.11.3 |
| Apple | Ipados | before 14.5 |
| Apple | Iphone Os | before 14.5 |
| Apple | Mac Os X | from 10.14 through 10.14.5 from 10.15 through 10.15.5 Versions 10.14.6, 10.15.6, 10.15.7 |
| Apple | Macos | from 11.0 before 11.3 |
| Apple | Tvos | before 14.5 |
| Apple | Watchos | before 7.4 |
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212319
- https://support.apple.com/en-us/HT212321
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212327
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212319
- https://support.apple.com/en-us/HT212321
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212327