CVEvulnerability
CVE-2021-30736
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. An application may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 14.6)
• apple iphone os (< 14.6)
• apple macos (>= 11.0.1 < 11.4)
• apple tvos (< 14.6)
• apple watchos (< 7.5)
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://support.apple.com/en-us/HT212528 Vendor Advisory
- https://support.apple.com/en-us/HT212529 Vendor Advisory
- https://support.apple.com/en-us/HT212532 Vendor Advisory
- https://support.apple.com/en-us/HT212533 Vendor Advisory
- https://support.apple.com/en-us/HT212528 Vendor Advisory
- https://support.apple.com/en-us/HT212529 Vendor Advisory
- https://support.apple.com/en-us/HT212532 Vendor Advisory
- https://support.apple.com/en-us/HT212533 Vendor Advisory