CVE-2021-30814 — Out-of-bounds Write in Apple IOS AND Ipados

CWE-787 — Out-of-bounds WriteCWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.6%
top 29.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Apple IOS AND IpadosApple TvosApple Watchos+8 more
Timeline
PublishedOct 28
Latest updateMay 24

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages14 packages

▶CVEListV5apple/tvosunspecified — 15
▶NVDapple/tvos< 15.0
▶NVDapple/ipados< 15.0
▶CVEListV5apple/watchosunspecified — 8
▶NVDapple/watchos< 8.0

🔴Vulnerability Details

1
GHSA
GHSA-w3w2-prxj-chgg: A memory corruption issue was addressed with improved input validation↗2022-05-24
▶

📋Vendor Advisories

6
Apple
CVE-2021-30814: iCloud for Windows 13↗2021-11-10
▶
Apple
CVE-2021-30814: macOS Monterey 12.0.1↗2021-10-25
▶
Apple
CVE-2021-30814: watchOS 8↗2021-09-20
▶
Apple
CVE-2021-30814: iOS 15 and iPadOS 15↗2021-09-20
▶
Apple
CVE-2021-30814: iTunes 12.12 for Windows↗2021-09-20
▶