CVEvulnerability

CVE-2021-30983

7.8 HIGH Known exploited Published 2021-08-24 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Apple iOS and iPadOS Buffer Overflow Vulnerability — Apple iOS and iPadOS

Apple iOS and iPadOS contain a buffer overflow vulnerability that could allow an application to execute code with kernel privileges.

Added to KEV: 2022-06-27
Remediation due: 2022-07-18
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-30983

Status: Analyzed
Published: 2021-08-24
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-120

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.

Affected configurations

• apple ipados (< 15.2) • apple iphone os (< 15.2)

Weakness · CWE (1)

CWE-120 Buffer Copy without Checking Size of Input weakness

References