First published: Mon Sep 13 2021(Updated: )
A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadOS 15, watchOS 8, Security Update 2021-007 Catalina. Processing a malicious audio file may result in unexpected application termination or arbitrary code execution.
Credit: JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Big Sur | <11.6 | 11.6 |
Apple iOS | <14.8 | 14.8 |
Apple iPadOS | <14.8 | 14.8 |
Apple iOS | <15 | 15 |
Apple iPadOS | <15 | 15 |
Apple tvOS | <15 | 15 |
Apple watchOS | <8 | 8 |
Apple Catalina | ||
Apple iPadOS | <14.8 | |
Apple iPhone OS | <14.8 | |
Apple Mac OS X | <10.15.7 | |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-004 | |
Apple Mac OS X | =10.15.7-security_update_2021-005 | |
Apple Mac OS X | =10.15.7-security_update_2021-006 | |
Apple Mac OS X | =10.15.7-supplemental_update | |
Apple macOS | >=11.0<11.6 | |
Apple tvOS | <15.0 | |
Apple watchOS | <8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2021-30834 is a logic issue in CoreAudio that has been addressed with improved state management.
CVE-2021-30834 affects watchOS up to version 8, iOS up to version 15, iPadOS up to version 15, macOS Big Sur up to version 11.6, iOS up to version 14.8, iPadOS up to version 14.8, and tvOS up to version 15.
To fix CVE-2021-30834, update your Apple watchOS to version 8, iOS to version 15, iPadOS to version 15, macOS Big Sur to version 11.6, iOS to version 14.8, iPadOS to version 14.8, and tvOS to version 15.
You can find more information about CVE-2021-30834 on the Apple website at the following links: [support.apple.com/en-us/HT212871](https://support.apple.com/en-us/HT212871), [support.apple.com/en-us/HT212814](https://support.apple.com/en-us/HT212814), [support.apple.com/en-us/HT212804](https://support.apple.com/en-us/HT212804).