Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out-of-bounds read was addressed with improved input validation.
References
Link | Resource |
---|---|
https://support.apple.com/en-us/HT212529 | Vendor Advisory |
https://support.apple.com/en-us/HT212532 | Vendor Advisory |
https://support.apple.com/en-us/HT212533 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Sep 2021, 20:16
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.5 |
CWE | CWE-125 | |
CPE | cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
|
References | (MISC) https://support.apple.com/en-us/HT212533 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT212529 - Vendor Advisory | |
References | (MISC) https://support.apple.com/en-us/HT212532 - Vendor Advisory |
08 Sep 2021, 14:55
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-09-08 14:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-30755
Mitre link : CVE-2021-30755
CVE.ORG link : CVE-2021-30755
JSON object : View
Products Affected
apple
- macos
- watchos
- tvos
CWE
CWE-125
Out-of-bounds Read