CVE-2021-1780
published 2021-04-02CVE-2021-1780: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged…
PriorityP413medium4.4CVSS 3.1
AVLACLPRHUINSUCNINAH
EPSS
0.25%
16.4th percentile
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_14.4_and_ipados | — | — |
| apple | ios_and_ipados | >= unspecified < 14.4 | 14.4 |
| apple | ipados | < 14.4 | 14.4 |
| apple | iphone_os | < 14.4 | 14.4 |
CVSS provenance
nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2021-1780: iOS 14.4 and iPadOS 14.4
vendor_apple·2021-01-26·CVSS 4.4
CVE-2021-1780 [MEDIUM] CVE-2021-1780: iOS 14.4 and iPadOS 14.4
Apple Security Update: About the security content of iOS 14.4 and iPadOS 14.4
Product: iOS 14.4 and iPadOS
Version: 14.4
CVE: CVE-2021-1780
Component: Bluetooth
Impact: An attacker in a privileged position may be able to perform a denial of service attack
Description: A memory initialization issue was addressed with improved memory handling.
GHSA
GHSA-47jr-g6q2-jxrq: A memory initialization issue was addressed with improved memory handling
ghsa_unreviewed·2022-05-24
CVE-2021-1780 [MEDIUM] CWE-665 GHSA-47jr-g6q2-jxrq: A memory initialization issue was addressed with improved memory handling
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-04-02
Published