CVE-2021-30917: Input Validation
First published: Tue Aug 24 2021(Updated: )
ColorSync. A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation.
Credit: Alexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project ZeroAlexandru-Vlad Niculae Mateusz Jurczyk Google Project Zero cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Monterey | <12.0.1 | 12.0.1 |
| Apple Catalina | ||
| Apple macOS Big Sur | <11.6.1 | 11.6.1 |
| Apple watchOS | <8.1 | 8.1 |
| Apple tvOS | <15.1 | 15.1 |
| Apple iOS | <14.8.1 | 14.8.1 |
| Apple iPadOS | <14.8.1 | 14.8.1 |
| Apple iOS | <15.1 | 15.1 |
| Apple iPadOS | <15.1 | 15.1 |
| Apple Ipad Os | <14.8.1 | |
| Apple iPadOS | =15.0 | |
| Apple iPhone OS | <14.8.1 | |
| Apple iPhone OS | =15.0 | |
| Apple Mac OS X | <10.15.7 | |
| Apple Mac OS X | =10.15.7 | |
| Apple Mac OS X | =10.15.7-security_update_2020-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-002 | |
| Apple Mac OS X | =10.15.7-security_update_2021-003 | |
| Apple Mac OS X | =10.15.7-security_update_2021-004 | |
| Apple Mac OS X | =10.15.7-security_update_2021-005 | |
| Apple Mac OS X | =10.15.7-security_update_2021-006 | |
| Apple Mac OS X | =10.15.7-supplemental_update | |
| Apple macOS | >=11.0<11.6.1 | |
| Apple macOS | =12.0 | |
| Apple tvOS | <15.1 | |
| Apple watchOS | <8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/165075/Apple-ColorSync-CMMNDimLinear-Interpolate-Uninitialized-Memory.html
- https://support.apple.com/en-us/HT212867 (Advisory)
- https://support.apple.com/en-us/HT212868 (Advisory)
- https://support.apple.com/en-us/HT212869 (Advisory)
- https://support.apple.com/en-us/HT212871 (Advisory)
- https://support.apple.com/en-us/HT212872 (Advisory)
- https://support.apple.com/en-us/HT212874 (Advisory)
- https://support.apple.com/en-us/HT212876 (Advisory)
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30873
- CVE-2021-30876
- CVE-2021-30879
- CVE-2021-30877
- CVE-2021-30880
- CVE-2021-30994
- CVE-2021-30907
- CVE-2021-30899
- CVE-2021-30931
- CVE-2021-30866
- CVE-2021-30917
- CVE-2021-30903
- CVE-2021-30905
- CVE-2021-30919
- CVE-2020-9846
- CVE-2021-30881
- CVE-2021-30923
- CVE-2021-30831
- CVE-2021-30840
- CVE-2021-30852
- CVE-2021-30895
- CVE-2021-30896
- CVE-2021-30933
- CVE-2021-30906
- CVE-2021-30867
- CVE-2021-30814
- CVE-2021-30922
- CVE-2021-30824
- CVE-2021-30901
- CVE-2021-30821
- CVE-2021-30883
- CVE-2021-30924
- CVE-2021-30886
- CVE-2021-30909
- CVE-2021-30916
- CVE-2021-30864
- CVE-2021-30813
- CVE-2021-31011
- CVE-2021-30904
- CVE-2021-30910
- CVE-2021-30911
- CVE-2021-30874
- CVE-2021-30808
- CVE-2021-30920
- CVE-2021-31004
- CVE-2021-31002
- CVE-2021-30868
- CVE-2021-30912
- CVE-2021-30913
- CVE-2021-30915
- CVE-2021-31005
- CVE-2021-31008
- CVE-2021-30897
- CVE-2021-30884
- CVE-2021-30818
- CVE-2021-30836
- CVE-2021-30846
- CVE-2021-30849
- CVE-2021-30848
- CVE-2021-30851
- CVE-2021-30809
- CVE-2021-30823
- CVE-2021-30887
- CVE-2021-30888
- CVE-2021-30889
- CVE-2021-30861
- CVE-2021-30890
- CVE-2021-30930
- CVE-2021-30908
- CVE-2021-30833
- CVE-2021-30892
- CVE-2021-30926
- CVE-2021-30834
- CVE-2021-30844
- CVE-2021-30900
- CVE-2021-31007
- CVE-2021-30894
- CVE-2021-30918
- CVE-2021-30902
- CVE-2021-30914
- CVE-2021-30875
Frequently Asked Questions
What is CVE-2021-30917?
CVE-2021-30917 is a memory corruption issue in the processing of ICC profiles in ColorSync.
Who is affected by CVE-2021-30917?
Users of Apple products such as Catalina, macOS Big Sur, macOS Monterey, iOS, iPadOS, watchOS, and tvOS are affected.
How can I fix CVE-2021-30917?
Apply the recommended remedies provided by Apple for your specific product version as mentioned in the references.
What is the severity of CVE-2021-30917?
The severity of CVE-2021-30917 is not mentioned in the provided information.
Where can I find more information about CVE-2021-30917?
You can find more information about CVE-2021-30917 on the official Apple support website mentioned in the references.
- collector/apple-support
- agent/type
- agent/references
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/tags
- agent/trending
- vendor/apple
- canonical/apple macos monterey
- canonical/apple catalina
- canonical/apple macos big sur
- canonical/apple watchos
- canonical/apple tvos
- canonical/apple ios
- canonical/apple ipados
- canonical/apple ipad os
- version/apple ipados/15.0
- canonical/apple iphone os
- version/apple iphone os/15.0
- canonical/apple mac os x
- version/apple mac os x/10.15.7
- version/apple mac os x/10.15.7-security_update_2020-001
- version/apple mac os x/10.15.7-security_update_2021-001
- version/apple mac os x/10.15.7-security_update_2021-002
- version/apple mac os x/10.15.7-security_update_2021-003
- version/apple mac os x/10.15.7-security_update_2021-004
- version/apple mac os x/10.15.7-security_update_2021-005
- version/apple mac os x/10.15.7-security_update_2021-006
- version/apple mac os x/10.15.7-supplemental_update
- canonical/apple macos
- version/apple macos/11.0
- version/apple macos/12.0