CVE-2021-31013

CVE-2021-31013 is an out-of-bounds read in Apple’s FontParser during processing of crafted fonts, leading to potential disclosure of process memory. The Red Hat entry confirms the same description. Affected products include macOS (Big Sur 11.x and Monterey 12.x), iOS, and iPadOS (and variants ref...

CVE-2021-30931

A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory...

CVE-2021-30931

CVE-2021-30931 is a logic-issue vulnerability in macOS Bluetooth handling that could allow a malicious application to disclose kernel memory. The issue was mitigated by Apple in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, and Security Update 2021-008 Catalina. Affected components are tied to ker...

CVE-2021-30929

CVE-2021-30929 is an out-of-bounds write vulnerability in macOS/iOS/macOS-related USD-file handling, fixed by bounds-check improvements. The issue could disclose memory contents when processing a maliciously crafted USD file. Affected software is macOS/macOS Monterey 12.1 and older Big Sur/ Catal...

CVE-2021-30911

CVE-2021-30911 describes an out-of-bounds read caused by insufficient bounds checking when processing a maliciously crafted USD file. Impact: potentially disclosing memory contents. Affected platforms and fixed versions include macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 an...

CVE-2021-30880

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2021-30879

CVE-2021-30879 affects macOS AppleScript handling (out-of-bounds read). Root cause is an issue in processing a malicious AppleScript binary; Apple fixed this with improved bounds checking. Affected products/versions include macOS Big Sur 11.6.1, macOS Catalina Security Update 2021-007, and macOS ...

CVE-2021-30877

CVE-2021-30877 is an Apple macOS AppleScript-related vulnerability involving an out-of-bounds read in an AppleScript binary. The issue was fixed by improved bounds checking and applies to macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. Exploitation could lead t...

CVE-2021-30877

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2021-30876

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2021-30876

CVE-2021-30876 is an AppleScript-related vulnerability in macOS where an out-of-bounds read was addressed by improved bounds checking. It affects macOS Monterey 12.0.1, Security Update 2021-007 Catalina, and macOS Big Sur 11.6.1. Exploitation could cause an application to terminate unexpectedly o...

CVE-2021-28611

Adobe After Effects version 18.2 and earlier is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current...

CVE-2021-28616

Adobe After Effects version 18.2 and earlier is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current...

CVE-2021-28616

Adobe After Effects version 18.2 and earlier is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current...

CVE-2021-28615

Adobe After Effects version 18.2 and earlier is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

CVE-2021-28609

Adobe After Effects version 18.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

CVE-2021-28600

Adobe After Effects version 18.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

Design/Logic Flaw

Adobe After Effects version 18.2 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this...

CVE-2021-28612

CVE-2021-28612 affects Adobe After Effects 18.2 and earlier. The vulnerability is an out-of-bounds read when parsing a specially crafted file, allowing memory disclosure and potential DoS in the current user context. Exploitation requires user interaction (opening a malicious file). Public source...

CVE-2021-28611 Adobe After Effects Out-of-bounds Read vulnerability

Adobe After Effects version 18.2 and earlier is affected by an Our-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information and cause a denial of service in the context of the current...