CVE-2021-30825: Apple macOS CoreML MLMODEL File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Reference Links

• https://support.apple.com/en-us/HT212814 (Advisory)
• http://seclists.org/fulldisclosure/2021/Oct/61
• https://www.zerodayinitiative.com/advisories/ZDI-22-354/
• https://support.apple.com/HT212814

Parent vulnerabilities

(Appears in the following advisories)

• HT212814

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-30837
• CVE-2021-30811
• CVE-2021-30838
• CVE-2021-30866
• CVE-2021-30834
• CVE-2021-30928
• CVE-2021-30825
• CVE-2021-30863
• CVE-2021-30816
• CVE-2021-30882
• CVE-2021-30831
• CVE-2021-30840
• CVE-2021-30841
• CVE-2021-30842
• CVE-2021-30843
• CVE-2021-30852
• CVE-2021-30867
• CVE-2021-30814
• CVE-2021-30835
• CVE-2021-30847
• CVE-2021-30857
• CVE-2013-0340
• CVE-2021-30819
• CVE-2021-30874
• CVE-2021-30855
• CVE-2021-30854
• CVE-2021-30898
• CVE-2021-30870
• CVE-2021-30925
• CVE-2021-30808
• CVE-2021-30815
• CVE-2021-31001
• CVE-2021-30826
• CVE-2021-31005
• CVE-2021-31008
• CVE-2021-30897
• CVE-2021-30884
• CVE-2021-30818
• CVE-2021-30836
• CVE-2021-30809
• CVE-2021-30846
• CVE-2021-30848
• CVE-2021-30849
• CVE-2021-30851
• CVE-2021-30930
• CVE-2021-30810

Frequently Asked Questions

• What is CVE-2021-30825?

  CVE-2021-30825 is a vulnerability in CoreML that was addressed with improved checks.

• Which software versions are affected by CVE-2021-30825?

  CVE-2021-30825 affects Apple iOS versions up to exclusive 15 and Apple iPadOS versions up to exclusive 15.

• How was CVE-2021-30825 resolved?

  CVE-2021-30825 was resolved with improved checks.

• What is the severity of CVE-2021-30825?

  The severity of CVE-2021-30825 has not been specified.

• Is there any additional information available for CVE-2021-30825?

  Yes, you can find additional information for CVE-2021-30825 at the following reference: [Link](https://support.apple.com/en-us/HT212814).