CVE-2021-30789: Input Validation
First published: Mon Jul 19 2021(Updated: )
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
Credit: Sunglin Knownsec 404 teamMickey Jin @patch1t Trend MicroMickey Jin @patch1t Trend MicroSunglin Knownsec 404 teamMickey Jin @patch1t Trend MicroSunglin Knownsec 404 teamMickey Jin @patch1t Trend MicroSunglin Knownsec 404 team product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPhone OS | <14.7 | |
| Apple Mac OS X | >=10.15<=10.15.6 | |
| Apple Mac OS X | =10.15.7 | |
| Apple Mac OS X | =10.15.7-security_update_2020 | |
| Apple Mac OS X | =10.15.7-security_update_2020-001 | |
| Apple Mac OS X | =10.15.7-security_update_2020-005 | |
| Apple Mac OS X | =10.15.7-security_update_2020-007 | |
| Apple Mac OS X | =10.15.7-security_update_2021-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-002 | |
| Apple Mac OS X | =10.15.7-security_update_2021-003 | |
| Apple Mac OS X | =10.15.7-supplemental_update | |
| Apple macOS | <11.5 | |
| Apple macOS | >=11.0<11.5 | |
| Apple tvOS | <14.7 | |
| Apple watchOS | <7.6 | |
| Apple watchOS | <7.6 | 7.6 |
| Apple Catalina | ||
| Apple macOS Big Sur | <11.5 | 11.5 |
| Apple tvOS | <14.7 | 14.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30805
- CVE-2021-30790
- CVE-2021-30811
- CVE-2021-30781
- CVE-2021-30672
- CVE-2021-30775
- CVE-2021-30776
- CVE-2021-30772
- CVE-2021-30777
- CVE-2021-30789
- CVE-2021-30733
- CVE-2021-30774
- CVE-2021-30780
- CVE-2021-30768
- CVE-2021-30760
- CVE-2021-30759
- CVE-2021-30788
- CVE-2021-30785
- CVE-2021-30787
- CVE-2021-30765
- CVE-2021-30766
- CVE-2021-30784
- CVE-2021-30731
- CVE-2021-30703
- CVE-2021-30793
- CVE-2021-30677
- CVE-2021-30783
- CVE-2021-30791
- CVE-2021-30792
- CVE-2021-30796
- CVE-2021-30782
- CVE-2021-30799
- CVE-2021-30871
- CVE-2021-31006
- CVE-2021-30748
- CVE-2021-30786
- CVE-2021-30817
- CVE-2021-30804
- CVE-2021-30803
- CVE-2021-30779
- CVE-2021-30778
- CVE-2021-3518
- CVE-2021-1821
- CVE-2021-31004
- CVE-2021-30798
- CVE-2021-30758
- CVE-2021-30795
- CVE-2021-30797
- CVE-2021-30763
- CVE-2021-30773
- CVE-2021-30769
- CVE-2021-30770
- CVE-2021-30802
Frequently Asked Questions
What is CVE-2021-30789?
CVE-2021-30789 is a vulnerability in CoreText that allows an out-of-bounds read.
What software is affected by CVE-2021-30789?
Apple watchOS up to version 7.6, Apple tvOS up to version 14.7, Apple Catalina, and Apple macOS Big Sur up to version 11.5 are affected by CVE-2021-30789.
What is the severity of CVE-2021-30789?
The severity of CVE-2021-30789 has not been specified.
How can I fix CVE-2021-30789?
To fix CVE-2021-30789, update your software to the latest version provided by Apple.
Where can I find more information about CVE-2021-30789?
You can find more information about CVE-2021-30789 on the Apple support page.
- collector/apple-support
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple catalina
- canonical/apple macos big sur
- canonical/apple watchos
- canonical/apple iphone os
- canonical/apple mac os x
- version/apple mac os x/10.15
- version/apple mac os x/10.15.6
- version/apple mac os x/10.15.7
- version/apple mac os x/10.15.7-security_update_2020
- version/apple mac os x/10.15.7-security_update_2020-001
- version/apple mac os x/10.15.7-security_update_2020-005
- version/apple mac os x/10.15.7-security_update_2020-007
- version/apple mac os x/10.15.7-security_update_2021-001
- version/apple mac os x/10.15.7-security_update_2021-002
- version/apple mac os x/10.15.7-security_update_2021-003
- version/apple mac os x/10.15.7-supplemental_update
- canonical/apple macos
- version/apple macos/11.0
- canonical/apple tvos