CVE-2021-30788
published 2021-09-08CVE-2021-30788: This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave…
PriorityP429high7.1CVSS 3.1
AVLACLPRNUIRSUCHINAH
EPSS
1.15%
63.4th percentile
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | >= unspecified < 14.7 | 14.7 |
| apple | ios_14.7_and_ipados | — | — |
| apple | iphone_os | < 14.7 | 14.7 |
| apple | mac_os_x | — | — |
| apple | mac_os_x | — | — |
| apple | mac_os_x | 10.14 – 10.14.5 | — |
| apple | mac_os_x | 10.15 – 10.15.6 | — |
| apple | macos | < 11.5 | 11.5 |
| apple | macos | >= unspecified < 11.5 | 11.5 |
| apple | macos | >= unspecified < 2021 | 2021 |
| apple | macos | >= unspecified < 14.7 | 14.7 |
| apple | macos | >= unspecified < 7.6 | 7.6 |
| apple | security_update_2021-005_mojave | — | — |
| apple | security_update_catalina | >= unspecified < 2021 | 2021 |
| apple | tvos | < 14.7 | 14.7 |
| apple | watchos | < 7.6 | 7.6 |
| msrc | cbl2_ntfs-3g_2022.5.17-1_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
CVSS provenance
nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc
vendor_redhat·2022-05-26·CVSS 7.8
CVE-2022-30788 [HIGH] CWE-122 ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc
ntfs-3g: crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition.
Package: libguestfs-winsupport (Red Hat Enterprise Linux 7) - Out of support scope
Package: virt:8.2/libguestfs-winsupport (Red Hat Enterprise Linux 8 Advanced Virtualization) - Will not fix
Package: virt:av/libguestfs-winsupport (Red Hat Enterprise Linux 8 Advanced Virtualization) - Will not fix
Package: virt-devel:8.2/libguestfs-winsupport (Red Hat Enterprise Linux 8 Advanced Virtualization) - Will not fix
Packa
Microsoft
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
vendor_msrc·2022-05-10·CVSS 7.8
CVE-2022-30788 [HIGH] CWE-787 A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
mitre: mitre
Customer Action Required: Yes
Rem
Apple
CVE-2021-30788: Security Update 2021-005 Mojave
vendor_apple·2021-07-21·CVSS 7.1
CVE-2021-30788 [HIGH] CVE-2021-30788: Security Update 2021-005 Mojave
Apple Security Update: About the security content of Security Update 2021-005 Mojave
Product: Security Update 2021-005 Mojave
CVE: CVE-2021-30788
Component: FontParser
Impact: Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents
Description: This issue was addressed with improved checks.
Apple
CVE-2021-30788: iOS 14.7 and iPadOS 14.7
vendor_apple·CVSS 7.1
CVE-2021-30788 [HIGH] CVE-2021-30788: iOS 14.7 and iPadOS 14.7
Apple Security Update: About the security content of iOS 14.7 and iPadOS 14.7
Product: iOS 14.7 and iPadOS
Version: 14.7
CVE: CVE-2021-30788
Component: FontParser
Impact: Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents
Description: This issue was addressed with improved checks.
GHSA
GHSA-5725-9883-g5fp: This issue was addressed with improved checks
ghsa_unreviewed·2022-05-24
CVE-2021-30788 [HIGH] GHSA-5725-9883-g5fp: This issue was addressed with improved checks
This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted tiff file may lead to a denial-of-service or potentially disclose memory contents.
No detection rules found.
No public exploits indexed.
Qualys
Prevent Pegasus Spyware Attacks with VMDR | Qualys
blogs_qualys·2021-07-23
Prevent Pegasus Spyware Attacks with VMDR | Qualys
#### Table of Contents
- Attack Vectors and Impact of Pegasus Spyware
- VMDR for Mobile Devices Helps Protect from Pegasus Spyware
- Get Started Now
Pegasus spyware is in the news, and it has been used to target devices of critical people from different sectors and countries including journalists, activists, politicians, and business executives. It has been said that a leaked list of 50,000 phone numbers of potential surveillance targets was obtained by Paris-based journalism nonprofit Forbidden Stories and Amnesty International.
Pegasus spyware is a surveillance software created by Israeli cyber intelligence firm NSO Group. Pegasus is one such software developed to gain access to your phone without consent and gather personal and sensitive information and deliver it to the user spying
Qualys
Protect your Devices from Pegasus Spyware using VMDR for Mobile Devices’ Proactive Approach
blogs_qualys·2021-07-23
Protect your Devices from Pegasus Spyware using VMDR for Mobile Devices’ Proactive Approach
## Table of Contents
Attack Vectors and Impact of Pegasus Spyware
VMDR for Mobile Devices Helps Protect from Pegasus Spyware
Get Started Now
Pegasus spyware is in the news, and it has been used to target devices of critical people from different sectors and countries including journalists, activists, politicians, and business executives. It has been said that a leaked list of 50,000 phone numbers of potential surveillance targets was obtained by Paris-based journalism nonprofit Forbidden Stories and Amnesty International.
Pegasus spyware is a surveillance software created by Israeli cyber intelligence firm NSO Group. Pegasus is one such software developed to gain access to your phone without consent and gather personal and sensitive information and deliver it to the user spying on you
https://support.apple.com/en-us/HT212600https://support.apple.com/en-us/HT212601https://support.apple.com/en-us/HT212602https://support.apple.com/en-us/HT212603https://support.apple.com/en-us/HT212604https://support.apple.com/en-us/HT212605https://support.apple.com/en-us/HT212600https://support.apple.com/en-us/HT212601https://support.apple.com/en-us/HT212602https://support.apple.com/en-us/HT212603https://support.apple.com/en-us/HT212604https://support.apple.com/en-us/HT212605
2021-09-08
Published