high8.8
CVE-2021-30953
An out-of-bounds read was addressed with improved bounds checking.
Impact
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 15.2 |
| Apple | Ipados | before 15.2 |
| Apple | Iphone Os | before 15.2 |
| Apple | Macos | from 12.0.0 through 12.1 |
| Apple | Tvos | before 15.2 |
| Apple | Watchos | before 8.3 |
| Fedoraproject | Fedora | Versions 34, 35 |
| Debian | Debian Linux | Versions 10.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2022/01/21/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212980
- https://support.apple.com/en-us/HT212982
- https://www.debian.org/security/2022/dsa-5060
- https://www.debian.org/security/2022/dsa-5061
- http://www.openwall.com/lists/oss-security/2022/01/21/2
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212980
- https://support.apple.com/en-us/HT212982
- https://www.debian.org/security/2022/dsa-5060
- https://www.debian.org/security/2022/dsa-5061