7.8
CWE
20 787
Advisory Published
CVE Published
Updated

CVE-2021-30771: Input Validation

First published: Mon May 24 2021(Updated: )

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and iPadOS 14.6, watchOS 7.5, tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.

Credit: Mickey Jin @patch1t Trend MicroCFF Topsec Alpha TeamMickey Jin @patch1t Trend MicroCFF Topsec Alpha TeamMickey Jin @patch1t Trend MicroCFF Topsec Alpha TeamMickey Jin @patch1t Trend MicroCFF Topsec Alpha Team product-security@apple.com

Affected SoftwareAffected VersionHow to fix
Apple watchOS<7.5
7.5
Apple macOS Big Sur<11.4
11.4
Apple iOS<14.6
14.6
Apple iPadOS<14.6
14.6
Apple tvOS<14.6
14.6
Apple iPadOS<14.6
Apple iPhone OS<14.6
Apple macOS>=11.0<11.4
Apple tvOS<14.6
Apple watchOS<7.5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2021-30771?

    CVE-2021-30771 is a vulnerability in FontParser that allows an attacker to perform an out-of-bounds write.

  • How does CVE-2021-30771 affect Apple tvOS?

    Apple tvOS up to version 14.6 is affected by CVE-2021-30771.

  • How does CVE-2021-30771 affect Apple watchOS?

    Apple watchOS up to version 7.5 is affected by CVE-2021-30771.

  • How does CVE-2021-30771 affect Apple macOS Big Sur?

    Apple macOS Big Sur up to version 11.4 is affected by CVE-2021-30771.

  • How does CVE-2021-30771 affect Apple iOS?

    Apple iOS up to version 14.6 is affected by CVE-2021-30771.

  • How does CVE-2021-30771 affect Apple iPadOS?

    Apple iPadOS up to version 14.6 is affected by CVE-2021-30771.

  • What is the severity of CVE-2021-30771?

    The severity of CVE-2021-30771 is not specified.

  • How do I fix CVE-2021-30771 on Apple tvOS?

    To fix CVE-2021-30771 on Apple tvOS, update to version 14.6 or later.

  • How do I fix CVE-2021-30771 on Apple watchOS?

    To fix CVE-2021-30771 on Apple watchOS, update to version 7.5 or later.

  • How do I fix CVE-2021-30771 on Apple macOS Big Sur?

    To fix CVE-2021-30771 on Apple macOS Big Sur, update to version 11.4 or later.

  • How do I fix CVE-2021-30771 on Apple iOS?

    To fix CVE-2021-30771 on Apple iOS, update to version 14.6 or later.

  • How do I fix CVE-2021-30771 on Apple iPadOS?

    To fix CVE-2021-30771 on Apple iPadOS, update to version 14.6 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203