First published: Tue Jan 26 2021(Updated: )
ImageIO. This issue was addressed with improved checks.
Credit: Xingwei Lin Ant Security LightJeonghoon Shin @singi21a THEORIMickey Jin & Qi Sun Trend Micro working with Trend Micro product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
tvOS | <14.4 | 14.4 |
Apple macOS | <11.2 | 11.2 |
macOS Catalina | ||
macOS Mojave | ||
Apple iOS, iPadOS, and watchOS | <14.4 | |
iOS | <14.4 | |
Apple iOS and macOS | >=10.14<10.14.6 | |
Apple iOS and macOS | >=10.15<10.15.7 | |
Apple iOS and macOS | =10.14.6 | |
Apple iOS and macOS | =10.14.6-security_update_2019-004 | |
Apple iOS and macOS | =10.14.6-security_update_2019-005 | |
Apple iOS and macOS | =10.14.6-security_update_2019-006 | |
Apple iOS and macOS | =10.14.6-security_update_2019-007 | |
Apple iOS and macOS | =10.14.6-security_update_2020-001 | |
Apple iOS and macOS | =10.14.6-security_update_2020-002 | |
Apple iOS and macOS | =10.14.6-security_update_2020-003 | |
Apple iOS and macOS | =10.14.6-security_update_2020-004 | |
Apple iOS and macOS | =10.14.6-security_update_2020-005 | |
Apple iOS and macOS | =10.14.6-security_update_2020-006 | |
Apple iOS and macOS | =10.14.6-security_update_2020-007 | |
Apple iOS and macOS | =10.14.6-supplemental_update | |
Apple iOS and macOS | =10.14.6-supplemental_update_2 | |
Apple iOS and macOS | =10.15.7 | |
Apple iOS and macOS | =10.15.7-supplemental_update | |
Apple iOS and macOS | >=11.0<11.2 | |
tvOS | <14.4 | |
Apple iOS, iPadOS, and watchOS | <7.3 | |
Apple iOS, iPadOS, and watchOS | <7.3 | 7.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-1777 is a vulnerability in ImageIO that was addressed with improved checks.
macOS Big Sur 11.2, Apple Catalina, Apple Mojave, watchOS up to 7.3, and tvOS up to 14.4 are affected by CVE-2021-1777.
To fix CVE-2021-1777, update to the latest versions of the affected software as recommended by Apple.
You can find more information about CVE-2021-1777 in the following Apple support articles: [here](https://support.apple.com/en-us/HT212147), [here](https://support.apple.com/en-us/HT212148), and [here](https://support.apple.com/en-us/HT212149).
The severity of CVE-2021-1777 is not specified in the provided information.