CVE-2021-30755: Input Validation

Reference Links

• https://support.apple.com/en-us/HT212529 (Advisory)
• https://support.apple.com/en-us/HT212532 (Advisory)
• https://support.apple.com/en-us/HT212533 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• HT212529
• HT212532
• HT212533

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-30678
• CVE-2021-30676
• CVE-2021-30688
• CVE-2021-30669
• CVE-2021-30707
• CVE-2021-30685
• CVE-2021-30672
• CVE-2021-30681
• CVE-2021-30686
• CVE-2021-30733
• CVE-2021-30753
• CVE-2021-30727
• CVE-2021-30724
• CVE-2021-30673
• CVE-2021-30771
• CVE-2021-30755
• CVE-2021-30684
• CVE-2021-30735
• CVE-2021-30697
• CVE-2021-30710
• CVE-2021-30683
• CVE-2021-30687
• CVE-2021-30700
• CVE-2021-30701
• CVE-2021-30705
• CVE-2021-30706
• CVE-2021-30719
• CVE-2021-30728
• CVE-2021-30726
• CVE-2021-30731
• CVE-2021-30740
• CVE-2021-30704
• CVE-2021-30715
• CVE-2021-30736
• CVE-2021-30739
• CVE-2021-30703
• CVE-2021-30680
• CVE-2021-30677
• CVE-2021-30702
• CVE-2021-30696
• CVE-2021-30756
• CVE-2021-30723
• CVE-2021-30691
• CVE-2021-30692
• CVE-2021-30694
• CVE-2021-30725
• CVE-2021-30746
• CVE-2021-30693
• CVE-2021-30695
• CVE-2021-30708
• CVE-2021-30709
• CVE-2021-30679
• CVE-2020-36226
• CVE-2020-36227
• CVE-2020-36223
• CVE-2020-36224
• CVE-2020-36225
• CVE-2020-36221
• CVE-2020-36228
• CVE-2020-36222
• CVE-2020-36230
• CVE-2020-36229
• CVE-2021-30738
• CVE-2021-30751
• CVE-2021-30737
• CVE-2021-30716
• CVE-2021-30717
• CVE-2021-30721
• CVE-2021-30722
• CVE-2021-30712
• CVE-2021-30668
• CVE-2021-30718
• CVE-2021-30671
• CVE-2021-30713
• CVE-2021-30744
• CVE-2021-21779
• CVE-2021-30682
• CVE-2021-30689
• CVE-2021-30749
• CVE-2021-30734
• CVE-2021-30720
• CVE-2021-23841
• CVE-2021-30698
• CVE-2021-30665
• CVE-2021-30663

Frequently Asked Questions

• What is CVE-2021-30755?

  CVE-2021-30755 is a vulnerability in FontParser that allows for the disclosure of process memory when processing a maliciously crafted font.

• Which software versions are affected by CVE-2021-30755?

  Apple tvOS up to version 14.6, Apple watchOS up to version 7.5, and Apple macOS Big Sur up to version 11.4 are affected by CVE-2021-30755.

• How can CVE-2021-30755 be exploited?

  CVE-2021-30755 can be exploited by processing a specially crafted font, resulting in the disclosure of process memory.

• What is the severity of CVE-2021-30755?

  The severity of CVE-2021-30755 is currently unknown.

• Is there a fix available for CVE-2021-30755?

  Yes, Apple has released updates to address CVE-2021-30755. It is recommended to update to the latest version of the affected software.