CVEvulnerability
CVE-2021-30846
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 15.0)
• apple ipados (< 14.8)
• apple iphone os (< 14.8)
• apple macos (< 12.0.1)
• apple tvos (< 15.0)
• apple watchos (< 8.0)
• debian debian linux 10.0
• debian debian linux 11.0
• fedoraproject fedora 33
• fedoraproject fedora 34
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://seclists.org/fulldisclosure/2021/Oct/60 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/61 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/63 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/ lists.fedoraproject.org
- https://support.apple.com/en-us/HT212807 Vendor Advisory
- https://support.apple.com/en-us/HT212814 Vendor Advisory
- https://support.apple.com/en-us/HT212815 Vendor Advisory
- https://support.apple.com/en-us/HT212816 Vendor Advisory
- https://support.apple.com/en-us/HT212819 Vendor Advisory
- https://support.apple.com/kb/HT212869 Vendor Advisory
- https://www.debian.org/security/2021/dsa-4995 Third Party Advisory
- https://www.debian.org/security/2021/dsa-4996 Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/60 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/61 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/63 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H6MGXCX7P5AHWOQ6IRT477UKT7IS4DAD/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ON5SDVVPVPCAGFPW2GHYATZVZYLPW2L4/ lists.fedoraproject.org
- https://support.apple.com/en-us/HT212807 Vendor Advisory
- https://support.apple.com/en-us/HT212814 Vendor Advisory
- https://support.apple.com/en-us/HT212815 Vendor Advisory
- https://support.apple.com/en-us/HT212816 Vendor Advisory
- https://support.apple.com/en-us/HT212819 Vendor Advisory
- https://support.apple.com/kb/HT212869 Vendor Advisory
- https://www.debian.org/security/2021/dsa-4995 Third Party Advisory
- https://www.debian.org/security/2021/dsa-4996 Third Party Advisory