CVE-2021-30997

CVE-2021-30997 concerns an S/MIME handling issue in iOS/iPadOS Mail where encrypted emails could disclose plaintext content. The Apple advisory and Red Hat/NVD entries indicate the vulnerability was mitigated by not automatically loading certain MIME parts, and Apple fixed it in iOS 15.2/iPadOS 1...

CVE-2021-30996

CVE-2021-30996 is a race condition affecting Apple platforms (notably IOMobileFrameBuffer and Kernel components) that could allow a malicious app to execute arbitrary code with kernel privileges. It was fixed in macOS Monterey 12.1 and iOS 15.2 / iPadOS 15.2. Public details in connected sources c...

CVE-2021-30993

CVE-2021-30993 involves a kernel-level buffer overflow in Apple’s OS stack. The description confirms a memory handling issue that could allow an attacker in a privileged network position to execute arbitrary code. Publicly documented fixes target macOS Monterey 12.1 and Apple OS updates for watch...

CVE-2021-30993

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2021-30992

CVE-2021-30992 affects Apple iOS and iPadOS FaceTime in which a user in a FaceTime call may leak sensitive information via Live Photos metadata. Root cause: improper handling of file metadata; fix: Apple addressed in iOS 15.2 and iPadOS 15.2. Practical impact is limited to information disclosure ...

CVE-2021-30991

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30991

CVE-2021-30991 is an Apple iOS/iPadOS kernel-related vulnerability described as an out-of-bounds read that could allow a malicious application to execute arbitrary code with kernel privileges. Affected products: iPhone and iPad with iOS 15.2 / iPadOS 15.2 or earlier versions vulnerable to the iss...

CVE-2021-30988

Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application may be able to identify what other applications a user has installed...

CVE-2021-30988

CVE-2021-30988 concerns iOS/iPadOS via the NetworkExtension component, describing a permissions issue that could let a malicious app identify which other apps are installed. Root cause cited as improved validation; the fix is implemented in iOS 15.2 and iPadOS 15.2. Implication: information discl...

CVE-2021-30985

CVE-2021-30985 is an out-of-bounds write in the IOMobileFrameBuffer component affecting Apple iOS/iPadOS. The issue could let a malicious app execute arbitrary code with kernel privileges and is mitigated by the vendor by memory/bounds checking improvements. Apple states this flaw is fixed in iOS...

CVE-2021-30984

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30984

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2021-30983

CVE-2021-30983 is a buffer overflow in Apple’s IOMobileFrameBuffer path that can lead to arbitrary code execution with kernel privileges. Technical analysis in the connected documents shows the vulnerability involving a privilege-escalation flow across the Display Co-Processor (DCP) where an IOCo...

CVE-2021-30983

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30983

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-30979

CVE-2021-30979 affects Apple platforms via the ModelIO ABC file parsing path. The ZDI advisory documents a heap-based buffer overflow in ModelIO that can lead to remote code execution when a crafted ABC file is processed. Public references align this with the USD/ModelIO data pathway vulnerabilit...

CVE-2021-30973

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted file may disclose user information...

CVE-2021-30971

CVE-2021-30971 describes an out-of-bounds write in USD file processing. Affected: macOS Monterey 12.1; iOS 15.2 and iPadOS 15.2; macOS Big Sur 11.6.2; Security Update 2021-008 Catalina. Root cause: improved bounds checking fixes the issue. Impact: processing a malicious USD file may terminate the...

CVE-2021-30971

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may lead to unexpected application termination or...

CVE-2021-30968

CVE-2021-30968 is a validation issue in hard link handling that Apple fixed via sandbox restrictions across multiple OS updates. Public details show the bug being addressed in macOS Big Sur 11.6.2, macOS Monterey 12.1, tvOS 15.2, iOS 15.2/iPadOS 15.2, watchOS 8.3, and Security Update 2021-008 Cat...