CVE-2021-30693

CVE-2021-30693 describes a validation issue in Apple's image-processing path that could allow arbitrary code execution when processing a malicious image. The issue is mitigated by updates: macOS Big Sur 11.4, macOS Security Update 2021-003 Catalina, 2021-004 Mojave, and iOS 14.6 / iPadOS 14.6. Th...

CVE-2021-30709

CVE-2021-30709 affects macOS and iOS platforms where processing a maliciously crafted USD file could disclose memory contents. The issue was addressed by Apple with fixes in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, and iOS/iPadOS 14.6. Root cause det...

CVE-2021-30694

CVE-2021-30694 is an information-disclosure vulnerability in Apple platforms where processing a maliciously crafted USD file could disclose memory contents due to an issue with state management. Publicly affected software includes macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Up...

CVE-2021-30700

Technical details about CVE-2021-30700 are not publicly provided in the supplied documents. Monitor for updates from Apple and security advisories.

CVE-2021-30714

A race condition was addressed with improved state handling. This issue is fixed in iOS 14.6 and iPadOS 14.6. An application may be able to cause unexpected system termination or write kernel memory...

CVE-2021-30714

CVE-2021-30714 is a race condition in AVEVideoEncoder, affecting iOS and iPadOS prior to the fixed update. Apple’s advisory for iOS 14.6 / iPadOS 14.6 states that a race condition could allow an application to cause unexpected system termination or write kernel memory. The vulnerability is descri...

CVE-2021-30695

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30715

This CVE (CVE-2021-30715) describes a logic issue that was mitigated by updated state management. The vulnerability is fixed in Apple operating system updates: tvOS 14.6, iOS 14.6, iPadOS 14.6, Security Update 2021-003 for Catalina, macOS Big Sur 11.4, and watchOS 7.5. Impact is described as allo...

CVE-2021-30697

CVE-2021-30697 is a logic issue described by Apple as being mitigated by improvements in state management. The CVE entry lists fixes in tvOS 14.6, macOS Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, and watchOS 7.5. A local user may be able to leak sensitive user ...

CVE-2021-30710

CVE-2021-30710 describes a memory corruption issue in Apple platforms that is mitigated by updated state management. The vulnerability affects tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, and watchOS 7.5. A malicious ...

CVE-2021-30698

CVE-2021-30698 refers to a null pointer dereference in Apple software, addressed by improved input validation. Affected products include macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. The issue allows a remote attacker to cause a denial of service. The NVD reports CVSS v3.1 base sco...

CVE-2021-30698

A null pointer dereference was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, Safari 14.1.1, iOS 14.6 and iPadOS 14.6. A remote attacker may be able to cause a denial of service...

CVE-2021-30706

CVE-2021-30706 concerns an information-disclosure vulnerability in Apple’s ImageIO WEBP file parsing on macOS. The root cause is an out-of-bounds read triggered by specially crafted WEBP data, allowing sensitive information to be disclosed from affected processes. Public advisories list the impac...

CVE-2021-30706

Processing a maliciously crafted image may lead to disclosure of user information. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. This issue was addressed with improved checks...

CVE-2021-30699

CVE-2021-30699 concerns a window management issue in Apple iOS/iPadOS that could allow a user to view restricted content from the lock screen. The vulnerability is stated as fixed in iOS 14.6 and iPadOS 14.6, addressing improper state/window management. Public sources in the connected documents c...

CVE-2021-30699

A window management issue was addressed with improved state management. This issue is fixed in iOS 14.6 and iPadOS 14.6. A user may be able to view restricted content from the lockscreen...

CVE-2021-30705

CVE-2021-30705 describes a memory-disclosure issue when Processing a maliciously crafted ASTC file. Apple states this was fixed by improved checks and updates across multiple platforms: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, plus Security Updates Mojave 2021-004 and...

CVE-2021-30705

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted ASTC file may disclose memory contents...

CVE-2021-30692

An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents...

CVE-2021-30701

CVE-2021-30701 affects Apple platforms and arises from processing a maliciously crafted image that could lead to arbitrary code execution. The issue is fixed in: tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, watchOS 7.5, and Security Update 2021-003 for Catalina. NVD cites a base score of...