CVE-2021-30953

high

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

https://support.apple.com/en-us/HT212975

https://support.apple.com/en-us/HT212978

https://support.apple.com/en-us/HT212976

https://support.apple.com/en-us/HT212982

https://support.apple.com/en-us/HT212980

http://www.openwall.com/lists/oss-security/2022/01/21/2

https://lists.fedoraproject.org/archives/list/[email protected]/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

https://www.debian.org/security/2022/dsa-5061

https://www.debian.org/security/2022/dsa-5060

https://lists.fedoraproject.org/archives/list/[email protected]/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Details

Source: MITRE

Published: 2021-08-24

Updated: 2022-02-25

Type: CWE-125

Risk Information

CVSS v2

Base Score: 6.8

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 2.8

Severity: HIGH