medium5.5
CVE-2021-1846
Processing a maliciously crafted audio file may disclose restricted memory.
Impact
Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.5 |
| Apple | Iphone Os | before 14.5 |
| Apple | Mac Os X | Versions 10.15, 10.15.1, 10.15.2, 10.15.3, 10.15.4, 10.15.5 |
| Apple | Macos | from 11.0 before 11.3 |
| Apple | Tvos | before 14.5 |
| Apple | Watchos | before 7.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326