← Back to CVEs
CVE-2021-30905
MEDIUM5.5
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina. Processing a maliciously crafted file may disclose user information.
CVE Details
CVSS v3.1 Score5.5
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
Published8/24/2021
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
apple:ipadosapple:iphone_osapple:mac_os_xapple:macosapple:tvosapple:watchos
Weaknesses (CWE)
CWE-125
References
https://support.apple.com/en-us/HT212867(product-security@apple.com)
https://support.apple.com/en-us/HT212869(product-security@apple.com)
https://support.apple.com/en-us/HT212871(product-security@apple.com)
https://support.apple.com/en-us/HT212874(product-security@apple.com)
https://support.apple.com/en-us/HT212876(product-security@apple.com)
https://support.apple.com/kb/HT212807(product-security@apple.com)
https://support.apple.com/kb/HT212872(product-security@apple.com)
https://www.zerodayinitiative.com/advisories/ZDI-21-1368/(product-security@apple.com)
https://support.apple.com/en-us/HT212867(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212869(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212871(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212874(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT212876(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT212807(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT212872(af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-21-1368/(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.