First published: Mon Sep 13 2021(Updated: )
FontParser. This issue was addressed with improved checks.
Credit: Xingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security LightXingwei Lin Ant Security Light product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Big Sur | <11.6 | 11.6 |
Apple Catalina | ||
Apple iOS | <15 | 15 |
Apple iPadOS | <15 | 15 |
Apple tvOS | <15 | 15 |
Apple iPadOS | <14.8 | |
Apple iPhone OS | <14.8 | |
Apple Mac OS X | >=10.15<=10.15.6 | |
Apple Mac OS X | =10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2020-005 | |
Apple Mac OS X | =10.15.7-security_update_2020-007 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-004 | |
Apple Mac OS X | =10.15.7-supplemental_update | |
Apple macOS | >=11.0<11.6 | |
Apple tvOS | <15.0 | |
Apple watchOS | <8.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2021-30841 is a vulnerability in FontParser that was addressed with improved checks.
Apple watchOS 8, Apple iOS up to version 15, Apple iPadOS up to version 15, Apple macOS Big Sur up to version 11.6, Apple iOS up to version 14.8, Apple iPadOS up to version 14.8, Apple Catalina, and Apple tvOS up to version 15 are affected by CVE-2021-30841.
To fix CVE-2021-30841, update your Apple products to the recommended versions: watchOS 8, iOS 15, iPadOS 15, macOS Big Sur 11.6, iOS 14.8, iPadOS 14.8, Catalina, or tvOS 15.
You can find more information about CVE-2021-30841 on the Apple support page: [https://support.apple.com/en-us/HT212814](https://support.apple.com/en-us/HT212814)