CVE-2021-1817 — Out-of-bounds Write in Apple IOS AND Ipados

CWE-787 — Out-of-bounds WriteCWE-20 — Improper Input Validation8 documents7 sources
Severity
8.8HIGHNVD
EPSS
1.0%
top 23.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Apple IOS AND IpadosApple MacosApple Tvos+8 more
Timeline
PublishedSep 8
Latest updateApr 4

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages14 packages

▶CVEListV5apple/tvosunspecified — 14.5
▶NVDapple/tvos< 14.5
▶CVEListV5apple/macosunspecified — 11.3
▶NVDapple/macos11.0 — 11.3
▶NVDapple/ipados< 14.5

🔴Vulnerability Details

2
GHSA
GHSA-wm9j-fw55-hv9g: A memory corruption issue was addressed with improved state management↗2022-05-24
▶
OSV
CVE-2021-1817: A memory corruption issue was addressed with improved state management↗2021-09-08
▶

📋Vendor Advisories

5
Chrome
Stable Channel Update for Desktop: CVE-2023-1815↗2023-04-04
▶
Red Hat
webkitgtk: Memory corruption leading to arbitrary code execution↗2021-07-28
▶
Apple
CVE-2021-1817: iOS 14.5 and iPadOS 14.5↗2021-04-26
▶
Apple
CVE-2021-1817: macOS Big Sur 11.3↗2021-04-26
▶
Debian
CVE-2021-1817: webkit2gtk - A memory corruption issue was addressed with improved state management. This iss...↗2021
▶