CVE-2021-30993

CVE-2021-30993 involves a kernel-level buffer overflow in Apple’s OS stack. The description confirms a memory handling issue that could allow an attacker in a privileged network position to execute arbitrary code. Publicly documented fixes target macOS Monterey 12.1 and Apple OS updates for watch...

CVE-2021-30983

CVE-2021-30983 is a buffer overflow in Apple’s IOMobileFrameBuffer path that can lead to arbitrary code execution with kernel privileges. Technical analysis in the connected documents shows the vulnerability involving a privilege-escalation flow across the Display Co-Processor (DCP) where an IOCo...

CVE-2021-30983

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30979

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary...

CVE-2021-30979

CVE-2021-30979 affects Apple platforms via the ModelIO ABC file parsing path. The ZDI advisory documents a heap-based buffer overflow in ModelIO that can lead to remote code execution when a crafted ABC file is processed. Public references align this with the USD/ModelIO data pathway vulnerabilit...

CVE-2021-30963

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30962

A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30962

CVE-2021-30962 affects CoreAudio parsing of maliciously crafted audio files in tvOS and macOS Big Sur. The root cause is a memory initialization/handling issue that could disclose user information. Patches exist in tvOS 15.2 and macOS Big Sur 11.6.2; update to these versions to remediate. Other c...

CVE-2021-30960

CVE-2021-30960 concerns a buffer overflow in the Audio handling path of macOS. Public documentation indicates the issue is fixed in macOS Big Sur 11.6.3 and is also addressed in macOS Monterey 12.1 across the Audio stack. The vulnerability could be triggered by parsing a maliciously crafted audio...

CVE-2021-30960

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30959

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information...

CVE-2021-30954

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30954

CVE-2021-30954 is a type-confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. The issue is fixed in Apple platforms: tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2, and iPadOS 15.2. The connected Astra Linux advisory a...

CVE-2021-30954

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30954

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30941

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30941

CVE-2021-30941 is a buffer overflow vulnerability addressed by Apple in macOS Monterey 12.1, iOS 15.2, iPadOS 15.2, macOS Big Sur 11.6.2, and Security Update 2021-008 Catalina. The issue arises during processing of a maliciously crafted USD file, with the underlying problem described as improved ...

CVE-2021-30940

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30940

CVE-2021-30940 is a memory handling vulnerability described as a buffer overflow when processing a malicious USD file, potentially disclosing memory contents. Affected products/versions (per provided documents): macOS Big Sur 11.6.2 and Security Update 2021-008 Catalina; macOS Monterey 12.1; iOS ...

CVE-2021-30934

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...