CVE-2021-1844

high

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

https://support.apple.com/en-us/HT212222

https://support.apple.com/en-us/HT212223

https://support.apple.com/en-us/HT212220

https://support.apple.com/en-us/HT212221

https://lists.fedoraproject.org/archives/list/[email protected]/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/

https://support.apple.com/kb/HT212323

http://seclists.org/fulldisclosure/2021/Apr/55

https://www.debian.org/security/2021/dsa-4923

Details

Source: MITRE

Published: 2021-04-02

Updated: 2022-04-26

Type: CWE-119

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH