CVE-2021-1762

Summary

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOSunspecified < 14.4affected
AppleiOS and iPadOSunspecified < 14.4affected
ApplemacOSunspecified < 11.2affected

Weaknesses

  • Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution

ADP Enrichment

CVE Program Container

Additional References

References