Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution...

Information disclosure

This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8. A local attacker may be able to read sensitive information...

Code injection

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-30849

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, watchOS 8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30815

A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to view contacts from the lock screen...

CVE-2021-30815

CVE-2021-30815 affects Apple iOS/iPadOS 15 (and prior) where Siri/lock-screen interaction could allow a local attacker to view contacts from a locked device. Root cause cited as improper state management; Apple fixed the issue in iOS 15/iPadOS 15. Remediation: update to those versions. Exploitati...

CVE-2021-30810

CVE-2021-30810: An authorization issue in Apple's Wi-Fi subsystem was fixed via improved state management. A nearby attacker could coerce a user into a malicious Wi-Fi network during device setup. Affected platforms include iOS 15/iPadOS 15, watchOS 8, and tvOS 15; patch available in those updates.

CVE-2021-30825

CVE-2021-30825 concerns Apple’s CoreML MLMODEL parsing. The ZDI advisory (ZDI-22-354) describes an out-of-bounds read in CoreML’s MLMODEL file processing, which can be leveraged to cause arbitrary code execution and information disclosure. Apple’s security content for iOS 15/iPadOS 15 states the ...

CVE-2021-30825

This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2021-30819

CVE-2021-30819 is an Apple-specific issue described as an out-of-bounds read in the Model I/O subsystem when processing USD files. The fixed version is iOS 15 and iPadOS 15. The available connected material confirms the root cause (out-of-bounds read) and the affected software milestone, but does...

CVE-2021-30819

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30826

CVE-2021-30826 affects Apple's iOS/iPadOS Telephony subsystem. The issue is a logic flaw in state management that could cause the baseband to fail enabling integrity and ciphering protection in certain situations. Apple fixed this in iOS 15 and iPadOS 15. The available connected documents corrobo...

CVE-2021-30826

A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the baseband would fail to enable integrity and ciphering protection...

CVE-2021-30837

CVE-2021-30837 is an Apple memory issue that allows a local attacker to potentially execute arbitrary code with kernel privileges. It affects iOS 15, iPadOS 15, watchOS 8, and tvOS 15, with the vulnerability addressed by memory-handling improvements and patches in the documented OS versions. Conn...

CVE-2021-30837

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15, watchOS 8, tvOS 15. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30838

CVE-2021-30838 affects Apple devices with Apple Neural Engine running iOS 15 / iPadOS 15. The vulnerability is described as a memory corruption issue that was addressed with improved memory handling, allowing a malicious application to potentially execute arbitrary code with system privileges on ...

CVE-2021-30838

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to execute arbitrary code with system privileges on devices with an Apple Neural Engine...

CVE-2021-30841

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution...

CVE-2021-30841

CVE-2021-30841 is an Apple FontParser vulnerability. A crafted dfont file could trigger arbitrary code execution via font parsing. Affected products include iOS/iPadOS, macOS Big Sur, tvOS, watchOS, and related updates. The issue is addressed in iOS 14.8 / iPadOS 14.8, macOS Big Sur 11.6, Securit...

CVE-2021-30847

CVE-2021-30847 affects Apple ImageIO on Windows (via iCloud for Windows 13). The vulnerability is a memory corruption issue triggered by processing a malicious image, leading to arbitrary code execution. Apple’s advisory lists the fix as part of iCloud for Windows 13 security content (HT212953) w...