cbcvebase.
CVE-2021-1773
published 2021-04-02

CVE-2021-1773: A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update…

PriorityP420medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.81%
53.3th percentile
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service.

Affected

15 ranges
VendorProductVersion rangeFixed in
appleios_14.4_and_ipados
appleios_and_ipados>= unspecified < 14.414.4
appleipados< 14.414.4
appleiphone_os< 14.414.4
applemac_os_x
applemac_os_x
applemac_os_x>= 10.14 < 10.14.610.14.6
applemac_os_x>= 10.15 < 10.15.710.15.7
applemacos>= 11.0 < 11.211.2
applemacos>= unspecified < 11.211.2
applemacos>= unspecified < 7.37.3
applemacos>= unspecified < 14.414.4
applemacos_big_sur_11.2_security_update_2021-001_catalina_security_update_2021-001_mo
appletvos< 14.414.4
applewatchos< 7.37.3

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.