The version of Apple iOS running on the mobile device is prior to 15.2. It is, therefore, affected by multiple vulnerabilities, including the following:

  - Memory corruption issues exist in the processing of ICC profiles due to insufficient input validation.
    This may lead to arbitrary code execution. (CVE-2021-30926, CVE-2021-30942)

  - A buffer overflow issue exists when processing a maliciously crafted audio file. This may lead to     arbitrary code execution. (CVE-2021-30957)

  - An out-of-bounds read exists when playing a malicious audio file which may lead to arbitrary code     execution. (CVE-2021-30958)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.2 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD     file may lead to unexpected application termination or arbitrary code execution. (CVE-2021-30979)

  - An out-of-bounds read was addressed with improved input validation. Playing a malicious audio file may     lead to arbitrary code execution. (CVE-2021-30958)

  - An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously     crafted USD file may disclose memory contents. (CVE-2021-30929)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.1 Monterey. It is, therefore, affected by multiple vulnerabilities including the following:

  - A buffer overflow issue was addressed with improved memory handling. Processing a maliciously crafted USD     file may lead to unexpected application termination or arbitrary code execution. (CVE-2021-30979)

  - An out-of-bounds read was addressed with improved input validation. Playing a malicious audio file may     lead to arbitrary code execution. (CVE-2021-30958)

  - An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously     crafted USD file may disclose memory contents. (CVE-2021-30929)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 0.0.x prior to Catalina Security Update 2022-001 Catalina. It is, therefore, affected by multiple vulnerabilities :

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1,     watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass     certain Privacy preferences. (CVE-2021-30946)

  - A buffer overflow issue was addressed with improved memory handling. A malicious application may be able     to execute arbitrary code with kernel privileges. (CVE-2022-22593)

  - An information disclosure issue was addressed with improved state management. Processing a maliciously     crafted STL file may lead to unexpected application termination or arbitrary code execution (CVE-2022-22579)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
156187	Apple iOS < 15.2 Multiple Vulnerabilities (HT212976)	Nessus	Mobile Devices	12/19/2021	4/8/2024	high
156222	macOS 11.x < 11.6.2 (HT212979)	Nessus	MacOS X Local Security Checks	12/21/2021	3/23/2023	high
156230	macOS 12.x < 12.1 (HT212978)	Nessus	MacOS X Local Security Checks	12/21/2021	3/23/2023	high
157181	macOS 10.15.x < Catalina Security Update 2022-001 (HT213056)	Nessus	MacOS X Local Security Checks	1/28/2022	4/26/2022	high

Detections

Analytics

Plugins Search

high

high

high

high