Apple macOS CoreText TTF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

🗓️ 25 Jun 2021 00:00:00Reported by Mickey Jin (@patch1t) of Trend MicroType

This is a vulnerability in Apple macOS CoreText TTF Parsing causing a stack-based buffer overflow leading to remote code executio

Reporter	Title	Published	Views	Family All 23
Apple	About the security content of iOS 14.4 and iPadOS 14.4	26 Jan 202100:00	–	apple
Apple	About the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave	1 Feb 202100:00	–	apple
Apple	About the security content of watchOS 7.3	26 Jan 202100:00	–	apple
Apple	About the security content of tvOS 14.4	26 Jan 202100:00	–	apple
Apple	About the security content of iOS 14.4 and iPadOS 14.4 - Apple Support	1 Feb 202106:39	–	apple
Apple	About the security content of macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave - Apple Support	18 Feb 202106:14	–	apple
Apple	About the security content of watchOS 7.3 - Apple Support	1 Feb 202106:39	–	apple
Apple	About the security content of tvOS 14.4 - Apple Support	1 Feb 202106:39	–	apple
Tenable Nessus	Apple iOS < 14.4 Multiple Vulnerabilities (HT212146)	29 Jan 202100:00	–	nessus
Tenable Nessus	macOS 10.14.x < 10.14.6 Security Update 2021-001 / 10.15.x < 10.15.7 Security Update 2021-001 / macOS 11.x < 11.2 (HT212147)	3 Feb 202100:00	–	nessus

Source	Link
support	www.support.apple.com/HT212147

25 Jun 2021 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 37.8

EPSS0.01748