medium5.5
CVE-2021-30905
An out-of-bounds read was addressed with improved bounds checking.
Impact
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 14.8 Version 15.0 |
| Apple | Iphone Os | before 14.8 Version 15.0 |
| Apple | Mac Os X | from 10.15 before 10.15.7 Version 10.15.7 |
| Apple | Macos | before 11.6.1 Version 12.0.0 |
| Apple | Tvos | before 15.1 |
| Apple | Watchos | before 8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT212867
- https://support.apple.com/en-us/HT212869
- https://support.apple.com/en-us/HT212871
- https://support.apple.com/en-us/HT212874
- https://support.apple.com/en-us/HT212876
- https://support.apple.com/kb/HT212807
- https://support.apple.com/kb/HT212872
- https://www.zerodayinitiative.com/advisories/ZDI-21-1368/
- https://support.apple.com/en-us/HT212867
- https://support.apple.com/en-us/HT212869
- https://support.apple.com/en-us/HT212871
- https://support.apple.com/en-us/HT212874
- https://support.apple.com/en-us/HT212876
- https://support.apple.com/kb/HT212807
- https://support.apple.com/kb/HT212872
- https://www.zerodayinitiative.com/advisories/ZDI-21-1368/