CVE-2021-30733

Summary

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted font may result in the disclosure of process memory.

Affected Software

VendorProductVersion RangeStatus
AppleiOS and iPadOSunspecified < 14.6affected
ApplemacOSunspecified < 11.4affected
ApplemacOSunspecified < 14.6affected
ApplemacOSunspecified < 7.5affected
ApplemacOSunspecified < 2021affected
ApplemacOSunspecified < 2021affected

Weaknesses

  • Processing a maliciously crafted font may result in the disclosure of process memory

ADP Enrichment

CVE Program Container

Additional References

References