CVE-2021-30836 — Out-of-bounds Read in Apple IOS AND Ipados

CWE-125 — Out-of-bounds Read12 documents7 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 68.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Apple IOS AND IpadosApple TvosApple Watchos+4 more
Timeline
PublishedOct 28
Latest updateMay 24

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages9 packages

▶NVDapple/ipados< 14.8
▶CVEListV5apple/ios_and_ipadosunspecified — 14.8+1
▶CVEListV5apple/tvosunspecified — 15
▶NVDapple/tvos< 15.0
▶CVEListV5apple/watchosunspecified — 8

🔴Vulnerability Details

3
GHSA
GHSA-92w6-fxxp-58w5: An out-of-bounds read was addressed with improved input validation↗2022-05-24
▶
OSV
CVE-2021-30836: An out-of-bounds read was addressed with improved input validation↗2021-10-28
▶
CVEList
CVE-2021-30836: An out-of-bounds read was addressed with improved input validation↗2021-10-28
▶

📋Vendor Advisories

8
Red Hat
webkitgtk: Out-of-bounds read leading to memory disclosure↗2021-12-20
▶
Apple
CVE-2021-30836: macOS Monterey 12.0.1↗2021-10-25
▶
Apple
CVE-2021-30836: tvOS 15↗2021-09-20
▶
Apple
CVE-2021-30836: watchOS 8↗2021-09-20
▶
Apple
CVE-2021-30836: Safari 15↗2021-09-20
▶
CVE-2021-30836 — Out-of-bounds Read in Apple | cvebase