CVE-2021-30889: Buffer Overflow
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, iOS 15.1 and iPadOS 15.1, watchOS 8.1, tvOS 15.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Other sources
A flaw was found in WebKitGTK. A buffer overflow issue was addressed with improved memory handling.
References: https://webkitgtk.org/security/WSA-2021-0007.html https://www.openwall.com/lists/oss-security/2021/12/20/6
— Red Hat
WebKit. A buffer overflow issue was addressed with improved memory handling.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tvOSto a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
Apple iOS, iPadOS, and watchOSto a version that resolves this vulnerability.Fixed in 8.1 - Upgrade
Upgrade
macOSto a version that resolves this vulnerability.Fixed in 12.0.1 - Upgrade
Upgrade
Safarito a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
Apple iOS and iPadOSto a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
Apple iOS, iPadOS, and macOSto a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
redhat/webkitgtkto a version that resolves this vulnerability.Fixed in 2.34.0 - Upgrade
Upgrade
alpine/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.34.0-r0 - Upgrade
Upgrade
macOS Montereyto a version that resolves this vulnerability.Fixed in 12.0.1 - Upgrade
Upgrade
iOSto a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
iPadOSto a version that resolves this vulnerability.Fixed in 15.1 - Upgrade
Upgrade
watchOSto a version that resolves this vulnerability.Fixed in 8.1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30907
- CVE-2021-30917
- CVE-2021-30903
- CVE-2021-30905
- CVE-2021-30919
- CVE-2021-31007
- CVE-2021-30881
- CVE-2021-30895
- CVE-2021-30896
- CVE-2021-30906
- CVE-2021-30894
- CVE-2021-30883
- CVE-2021-30924
- CVE-2021-30886
- CVE-2021-30909
- CVE-2021-30910
- CVE-2021-30915
- CVE-2021-31008
- CVE-2021-30887
- CVE-2021-30888
- CVE-2021-30889
- CVE-2021-30890
- CVE-2021-30873
- CVE-2021-30876
- CVE-2021-30879
- CVE-2021-30877
- CVE-2021-30880
- CVE-2021-30994
- CVE-2021-30899
- CVE-2021-30931
- CVE-2021-30866
- CVE-2020-9846
- CVE-2021-30923
- CVE-2021-30831
- CVE-2021-30840
- CVE-2021-30852
- CVE-2021-30933
- CVE-2021-30867
- CVE-2021-30814
- CVE-2021-30922
- CVE-2021-30824
- CVE-2021-30901
- CVE-2021-30821
- CVE-2021-30916
- CVE-2021-30864
- CVE-2021-30813
- CVE-2021-31011
- CVE-2021-30904
- CVE-2021-30911
- CVE-2021-30874
- CVE-2021-30808
- CVE-2021-30920
- CVE-2021-31004
- CVE-2021-31002
- CVE-2021-30868
- CVE-2021-30912
- CVE-2021-30913
- CVE-2021-31005
- CVE-2021-30897
- CVE-2021-30884
- CVE-2021-30818
- CVE-2021-30836
- CVE-2021-30846
- CVE-2021-30849
- CVE-2021-30848
- CVE-2021-30851
- CVE-2021-30809
- CVE-2021-30823
- CVE-2021-30861
- CVE-2021-30930
- CVE-2021-30908
- CVE-2021-30833
- CVE-2021-30892
- CVE-2021-30900
- CVE-2021-30914
- CVE-2021-30875
- CVE-2021-30902
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-30889.
What software is affected by this vulnerability?
The Apple Safari browser, Apple iOS, Apple iPadOS, Apple macOS Monterey, Apple watchOS, and Apple tvOS are affected by this vulnerability.
What version of Apple Safari is affected by this vulnerability?
Apple Safari version 15.1 and earlier are affected by this vulnerability.
What is the severity of CVE-2021-30889?
The severity of CVE-2021-30889 is not mentioned in the provided information.
How can I fix the vulnerability CVE-2021-30889?
To fix the vulnerability CVE-2021-30889, update your Apple Safari browser to version 15.1 or later.