Lucene search

[email protected]NVD:CVE-2021-30743

HistorySep 08, 2021 - 2:15 p.m.

CVE-2021-30743

2021-09-0814:15:09

CWE-787

[email protected]

web.nvd.nist.gov

out-of-bounds write

input validation

arbitrary code execution

maliciously crafted image

ios 14.5

ipados 14.5

watchos 7.4

security update 2021-003 catalina

tvos 14.5

macos big sur 11.3

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.9%

JSON

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected configurations

Nvd

Node

appleipadosRange<14.5

appleiphone_osRange<14.5

applemac_os_xMatch10.15

applemac_os_xMatch10.15.1

applemac_os_xMatch10.15.2

applemac_os_xMatch10.15.3

applemac_os_xMatch10.15.4

applemac_os_xMatch10.15.5

applemac_os_xMatch10.15.6

applemac_os_xMatch10.15.6-

applemac_os_xMatch10.15.6supplemental_update

applemac_os_xMatch10.15.7

applemac_os_xMatch10.15.7-

applemac_os_xMatch10.15.7security_update_2020

applemac_os_xMatch10.15.7security_update_2020-001

applemac_os_xMatch10.15.7security_update_2020-005

applemac_os_xMatch10.15.7security_update_2020-007

applemac_os_xMatch10.15.7security_update_2021-001

applemac_os_xMatch10.15.7security_update_2021-002

applemac_os_xMatch10.15.7supplemental_update

applemacosRange11.0.1–11.3

appletvosRange<14.5

applewatchosRange<7.4

VendorProductVersionCPE
appleipados*cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
applemac_os_x10.15cpe:2.3:o:apple:mac_os_x:10.15:*:*:*:*:*:*:*
applemac_os_x10.15.1cpe:2.3:o:apple:mac_os_x:10.15.1:*:*:*:*:*:*:*
applemac_os_x10.15.2cpe:2.3:o:apple:mac_os_x:10.15.2:*:*:*:*:*:*:*
applemac_os_x10.15.3cpe:2.3:o:apple:mac_os_x:10.15.3:*:*:*:*:*:*:*
applemac_os_x10.15.4cpe:2.3:o:apple:mac_os_x:10.15.4:*:*:*:*:*:*:*
applemac_os_x10.15.5cpe:2.3:o:apple:mac_os_x:10.15.5:*:*:*:*:*:*:*
applemac_os_x10.15.6cpe:2.3:o:apple:mac_os_x:10.15.6:*:*:*:*:*:*:*
applemac_os_x10.15.6cpe:2.3:o:apple:mac_os_x:10.15.6:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	ipados	*	cpe:2.3:o:apple:ipados::::::::
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	mac_os_x	10.15	cpe:2.3:o:apple:mac_os_x:10.15:::::::*
apple	mac_os_x	10.15.1	cpe:2.3:o:apple:mac_os_x:10.15.1:::::::*
apple	mac_os_x	10.15.2	cpe:2.3:o:apple:mac_os_x:10.15.2:::::::*
apple	mac_os_x	10.15.3	cpe:2.3:o:apple:mac_os_x:10.15.3:::::::*
apple	mac_os_x	10.15.4	cpe:2.3:o:apple:mac_os_x:10.15.4:::::::*
apple	mac_os_x	10.15.5	cpe:2.3:o:apple:mac_os_x:10.15.5:::::::*
apple	mac_os_x	10.15.6	cpe:2.3:o:apple:mac_os_x:10.15.6:::::::*
apple	mac_os_x	10.15.6	cpe:2.3:o:apple:mac_os_x:10.15.6:-::::::