CVEvulnerability
CVE-2021-30849
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-10-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple itunes (< 12.12)
• apple safari (< 15.0)
• apple ipados (< 14.8)
• apple iphone os (< 14.8)
• apple macos (< 12.0.1)
• apple tvos (< 15.0)
• apple watchos (< 8.0)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://seclists.org/fulldisclosure/2021/Oct/60 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/61 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/63 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List
- https://support.apple.com/en-us/HT212807 Vendor Advisory
- https://support.apple.com/en-us/HT212814 Vendor Advisory
- https://support.apple.com/en-us/HT212815 Vendor Advisory
- https://support.apple.com/en-us/HT212816 Vendor Advisory
- https://support.apple.com/en-us/HT212817 Vendor Advisory
- https://support.apple.com/en-us/HT212819 Vendor Advisory
- https://support.apple.com/kb/HT212869 Vendor Advisory
- https://support.apple.com/kb/HT212953 Vendor Advisory
- http://seclists.org/fulldisclosure/2021/Oct/60 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/61 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/62 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2021/Oct/63 Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2021/10/26/9 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/1 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/2 Mailing List
- http://www.openwall.com/lists/oss-security/2021/10/27/4 Mailing List
- https://support.apple.com/en-us/HT212807 Vendor Advisory
- https://support.apple.com/en-us/HT212814 Vendor Advisory
- https://support.apple.com/en-us/HT212815 Vendor Advisory
- https://support.apple.com/en-us/HT212816 Vendor Advisory
- https://support.apple.com/en-us/HT212817 Vendor Advisory
- https://support.apple.com/en-us/HT212819 Vendor Advisory
- https://support.apple.com/kb/HT212869 Vendor Advisory
- https://support.apple.com/kb/HT212953 Vendor Advisory