CVE-2021-1758

CVE-2021-1758 is described in the public records as an out-of-bounds read that was addressed with improved bounds checking. It is fixed in macOS Big Sur 11.2, macOS Security Update 2021-001 Catalina and Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. The issue could allow a remote attac...

CVE-2021-1754

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1754

CVE-2021-1754 affects macOS family (Big Sur 11.2; Catalina 10.15.7; Mojave 10.14.6), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Description: Processing a maliciously crafted image may lead to arbitrary code execution due to an issue addressed by Apple in the 2021-001 security updates. Root...

CVE-2021-1759

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1759

CVE-2021-1759 is an Apple macOS/iOS/tvOS vulnerability described as an out-of-bounds read in CoreMedia/ImageIO that could lead to arbitrary code execution when processing a malicious image. The root cause is improper input validation, and Apple fixed it in macOS Big Sur 11.2 and Security Updates ...

CVE-2021-1750

Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2021-1746

CVE-2021-1746 affects Apple platforms (macOS Big Sur 11.2, Catalina 11.x/Pro, Mojave, watchOS, tvOS, iOS/iPadOS 14.4) where a maliciously crafted image could lead to arbitrary code execution. The issue is resolved via Apple security updates listed in the sources (e.g., HT212149/HT212147/HT212146/...

CVE-2021-1746

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1748

CVE-2021-1748: A validation issue in processing a URL was fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. The vulnerability could allow arbitrary javascript execution when handling a malicious URL. Connected Apple advisories (HT212149/HT212148/HT212146) confirm the affected platforms a...

CVE-2021-1748

A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-1747

CVE-2021-1747 is an Apple macOS/iOS/tvOS/watchOS vulnerability describing an out-of-bounds write mitigated by improved input validation. Affected products include macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; iOS 14.4 / iPadOS 14.4; watchOS 7.3; tvOS 14.4. Impact: processing m...

CVE-2021-1744

CVE-2021-1744 affects Apple platforms including macOS Big Sur 11.2, macOS Catalina/Mojave with Security Update 2021-001, iOS 14.4, iPadOS 14.4, watchOS 7.3 and tvOS 14.4. The issue is an out-of-bounds write in the ImageIO (and related image-processing) path triggered by processing a maliciously c...

CVE-2021-1743

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1742

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1742

The CVE-2021-1742 entry is confirmed as a real vulnerability affecting Apple platforms where processing a maliciously crafted image could lead to arbitrary code execution. Publicly documented fixes reside in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvO...

CVE-2021-1741

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1741

CVE-2021-1741 is an out-of-bounds read in a macOS/iOS image-processing component. Processing a maliciously crafted image may lead to arbitrary code execution. It is fixed via macOS Big Sur 11.2, Security Update 2021-001 (Catalina 11.2, Mojave 11.2), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4.

CVE-2020-29624

CVE-2020-29624 concerns a memory corruption issue in the processing of font files. The vulnerability is mitigated by improved input validation and is fixed across Apple platforms including watchOS 7.2, macOS Big Sur 11.1, Security Updates for Catalina and Mojave, and iOS/iPadOS 14.3, tvOS 14.3. A...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...