CVE-2021-1844
First published: Mon Mar 08 2021(Updated: )
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: Clément Lecigne GoogleAlison Huffman Microsoft Browser Vulnerability ResearchClément Lecigne GoogleAlison Huffman Microsoft Browser Vulnerability ResearchClément Lecigne GoogleAlison Huffman Microsoft Browser Vulnerability ResearchClément Lecigne GoogleAlison Huffman Microsoft Browser Vulnerability ResearchClément Lecigne GoogleAlison Huffman Microsoft Browser Vulnerability Research product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/webkit2gtk | 2.36.4-1~deb10u1 2.38.6-0+deb10u1 2.40.5-1~deb11u1 2.42.1-1~deb11u2 2.40.5-1~deb12u1 2.42.1-1~deb12u1 2.42.1-2 | |
| debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.42.1-1 | |
| Apple macOS Big Sur | <11.2.3 | 11.2.3 |
| Apple Safari | <14.0.3 | 14.0.3 |
| Apple watchOS | <7.3.2 | 7.3.2 |
| Apple iOS | <14.4.1 | 14.4.1 |
| Apple iPadOS | <14.4.1 | 14.4.1 |
| Apple tvOS | <14.5 | 14.5 |
| Apple Safari | <14.0.3 | |
| Apple iPadOS | <14.4.1 | |
| Apple iPhone OS | <14.4.1 | |
| Apple macOS | <11.2.3 | |
| Apple tvOS | <14.5 | |
| Apple watchOS | <7.3.2 | |
| Debian Debian Linux | =10.0 | |
| Fedoraproject Fedora | =33 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212220 (Advisory)
- https://support.apple.com/en-us/HT212221 (Advisory)
- https://support.apple.com/en-us/HT212222 (Advisory)
- https://support.apple.com/en-us/HT212223 (Advisory)
- https://support.apple.com/en-us/HT212323 (Advisory)
- http://seclists.org/fulldisclosure/2021/Apr/55
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/
- https://support.apple.com/kb/HT212323
- https://www.debian.org/security/2021/dsa-4923
- https://webkitgtk.org/security/WSA-2021-0003.html
- https://security-tracker.debian.org/tracker/CVE-2021-1844
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-1844
- CVE-2021-1849
- CVE-2021-1836
- CVE-2021-1808
- CVE-2021-1857
- CVE-2021-30752
- CVE-2021-1846
- CVE-2021-1809
- CVE-2021-30664
- CVE-2021-1811
- CVE-2021-1881
- CVE-2021-1882
- CVE-2021-1813
- CVE-2021-1883
- CVE-2021-1884
- CVE-2021-1885
- CVE-2021-30653
- CVE-2021-1843
- CVE-2021-1858
- CVE-2021-30743
- CVE-2021-30764
- CVE-2021-1864
- CVE-2021-1860
- CVE-2021-1816
- CVE-2021-1851
- CVE-2021-1832
- CVE-2021-30660
- CVE-2021-30652
- CVE-2021-1875
- CVE-2021-1822
- CVE-2021-1815
- CVE-2021-1739
- CVE-2021-1740
- CVE-2021-1868
- CVE-2021-1825
- CVE-2021-1817
- CVE-2021-1826
- CVE-2021-1820
- CVE-2021-30661
- CVE-2020-7463
- CVE-2021-1770
Frequently Asked Questions
What is CVE-2021-1844?
CVE-2021-1844 is a memory corruption issue in WebKit that has been addressed with improved validation.
Which software is affected by CVE-2021-1844?
The following software versions are affected: Apple Safari 14.0.3, Apple iOS up to 14.4.1, Apple iPadOS up to 14.4.1, Apple watchOS up to 7.3.2, Apple macOS Big Sur up to 11.2.3, and Apple tvOS up to 14.5.
How can I fix the vulnerability?
To fix the vulnerability, update your software to the following versions: Apple Safari 14.0.3, Apple iOS 14.4.1, Apple iPadOS 14.4.1, Apple watchOS 7.3.2, Apple macOS Big Sur 11.2.3, and Apple tvOS 14.5.
Where can I find more information about CVE-2021-1844?
You can find more information about CVE-2021-1844 on the official Apple support page at the following links: [Link-1](https://support.apple.com/en-us/HT212222), [Link-2](https://support.apple.com/en-us/HT212220), [Link-3](https://support.apple.com/en-us/HT212221).
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/security-tracker-debian
- vendor/apple
- canonical/apple macos big sur
- canonical/apple ios
- canonical/apple ipados
- canonical/apple watchos
- canonical/apple safari
- canonical/apple tvos
- canonical/apple iphone os
- canonical/apple macos
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/10.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/33
- package-manager/debian