deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-30914
Published: 2021-08-24
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212867; https://support.apple.com/en-us/HT212867
CVE: CVE-2021-30915
Published: 2021-08-24
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A person with physical access to an iOS device may be able to determine characteristics of a user's password in a secure text entry field.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT212867; https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212871
CVE: CVE-2021-30916
Published: 2021-08-24
Description: A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2021/Dec/43; http://seclists.org/fulldisclosure/2021/Dec/44; https://support.apple.com/en-us/HT212867
CVE: CVE-2021-30917
Published: 2021-08-24
Description: A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/165075/Apple-ColorSync-CMMNDimLinear-Interpolate-Uninitialized-Memory.html; https://support.apple.com/en-us/HT212867; https://support.apple.com/en-us/HT212868
CVE: CVE-2021-30918
Published: 2021-08-24
Description: A Lock Screen issue was addressed with improved state management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.0.1 and iPadOS 15.0.1. A user may be able to view restricted content from the Lock Screen.
CVSS Score: 2.4 (LOW)
References: http://seclists.org/fulldisclosure/2022/Mar/29; https://support.apple.com/en-us/HT212866; https://support.apple.com/en-us/HT212868
CVE: CVE-2021-30919
Published: 2021-08-24
Description: An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212867; https://support.apple.com/en-us/HT212868; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-30920
Published: 2021-08-24
Description: A permissions issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1. A local attacker may be able to read sensitive information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-30921
Published: 2021-08-24
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible onscreen.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-668
References: https://support.apple.com/en-us/HT212317; https://support.apple.com/en-us/HT212317
CVE: CVE-2021-30922
Published: 2021-08-24
Description: Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212872; https://support.apple.com/kb/HT212869; https://support.apple.com/kb/HT212871
CVE: CVE-2021-30923
Published: 2021-08-24
Description: A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/kb/HT212867; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-30924
Published: 2021-08-24
Description: A denial of service issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1. A remote attacker can cause a device to unexpectedly restart.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/kb/HT212867; https://support.apple.com/kb/HT212874
CVE: CVE-2021-30925
Published: 2021-08-24
Description: The issue was addressed with improved permissions logic. This issue is fixed in watchOS 8, macOS Big Sur 11.6, iOS 15 and iPadOS 15. A malicious application may be able to bypass Privacy preferences.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212814; https://support.apple.com/en-us/HT212819
CVE: CVE-2021-30926
Published: 2021-08-24
Description: Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30927
Published: 2021-08-24
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30928
Published: 2021-08-24
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6, watchOS 8, tvOS 15, iOS 14.8 and iPadOS 14.8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212807; https://support.apple.com/en-us/HT212814
CVE: CVE-2021-30929
Published: 2021-08-24
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978; https://support.apple.com/en-us/HT212979
CVE: CVE-2021-30930
Published: 2021-08-24
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. An attacker may be able to track users through their IP address.
CVSS Score: 5.3 (MEDIUM)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212869
CVE: CVE-2021-30931
Published: 2021-08-24
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. A malicious application may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981
CVE: CVE-2021-30932
Published: 2021-08-24
Description: The issue was addressed with improved permissions logic. This issue is fixed in iOS 15.2 and iPadOS 15.2. A person with physical access to an iOS device may be able to access contacts from the lock screen.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30933
Published: 2021-08-24
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.0.1, macOS Big Sur 11.6. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212804; https://support.apple.com/en-us/HT212869; https://support.apple.com/en-us/HT212804
CVE: CVE-2021-30934
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30935
Published: 2021-08-24
Description: A logic issue was addressed with improved validation. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 8.8 (HIGH)
References: https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981; https://support.apple.com/kb/HT212978
CVE: CVE-2021-30936
Published: 2021-08-24
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30937
Published: 2021-08-24
Description: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/165475/XNU-inm_merge-Heap-Use-After-Free.html; https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30938
Published: 2021-08-24
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A local user may be able to cause unexpected system termination or read kernel memory.
CVSS Score: 7.7 (HIGH)
References: https://support.apple.com/en-us/HT212978; https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981
CVE: CVE-2021-30939
Published: 2021-08-24
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30940
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978; https://support.apple.com/en-us/HT212979
CVE: CVE-2021-30941
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a maliciously crafted USD file may disclose memory contents.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978; https://support.apple.com/en-us/HT212979
CVE: CVE-2021-30942
Published: 2021-08-24
Description: Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/165559/Apple-ColorSync-Out-Of-Bounds-Read.html; https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30943
Published: 2021-08-24
Description: An issue in the handling of group membership was resolved with improved logic. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1. A malicious user may be able to leave a messages group but continue to receive messages in that group.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-613
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30944
Published: 2021-08-24
Description: Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious app may be able to access data from other apps by enabling additional logging.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30945
Published: 2021-08-24
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local attacker may be able to elevate their privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30946
Published: 2021-08-24
Description: A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass certain Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30947
Published: 2021-08-24
Description: An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able to access a user's files.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30948
Published: 2021-08-24
Description: An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2. A person with physical access to an iOS device may be able to access stored passwords without authentication.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-522
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30949
Published: 2021-08-24
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/165670/XNU-Kernel-mach_msg-Use-After-Free.html; https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30950
Published: 2021-08-24
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT212978; https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981
CVE: CVE-2021-30951
Published: 2021-08-24
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30952
Published: 2021-08-24
Description: An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30953
Published: 2021-08-24
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30954
Published: 2021-08-24
Description: A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: http://www.openwall.com/lists/oss-security/2022/01/21/2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
CVE: CVE-2021-30955
Published: 2021-08-24
Description: A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30956
Published: 2021-08-24
Description: A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker with physical access to a device may be able to see private contact information.
CVSS Score: 2.4 (LOW)
References: https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212976
CVE: CVE-2021-30957
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30958
Published: 2021-08-24
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30959
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981; https://support.apple.com/en-us/HT212979
CVE: CVE-2021-30960
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212975; https://support.apple.com/en-us/HT212976; https://support.apple.com/en-us/HT212978
CVE: CVE-2021-30961
Published: 2021-08-24
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-120
References: https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212981; https://support.apple.com/en-us/HT212979
CVE: CVE-2021-30962
Published: 2021-08-24
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://support.apple.com/en-us/HT212979; https://support.apple.com/en-us/HT212980; https://support.apple.com/en-us/HT212979