CVE-2021-30951: Use After Free

Reference Links

• https://webkitgtk.org/security/WSA-2022-0001.html
• https://security-tracker.debian.org/tracker/CVE-2021-30951
• https://support.apple.com/en-us/HT212982 (Advisory)
• https://support.apple.com/en-us/HT212978 (Advisory)
• https://support.apple.com/en-us/HT212975 (Advisory)
• https://support.apple.com/en-us/HT212980 (Advisory)
• http://www.openwall.com/lists/oss-security/2022/01/21/2
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/
• https://support.apple.com/en-us/HT212976 (Advisory)
• https://www.debian.org/security/2022/dsa-5060
• https://www.debian.org/security/2022/dsa-5061
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

Parent vulnerabilities

(Appears in the following advisories)

• HT212982
• HT212978
• HT212975
• HT212980
• HT212976

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-30934
• CVE-2021-30936
• CVE-2021-30951
• CVE-2021-30952
• CVE-2021-30984
• CVE-2021-30953
• CVE-2021-30954
• CVE-2021-30987
• CVE-2021-30950
• CVE-2021-30960
• CVE-2021-30986
• CVE-2021-30966
• CVE-2021-30926
• CVE-2021-30942
• CVE-2021-30957
• CVE-2021-30958
• CVE-2021-30935
• CVE-2021-30945
• CVE-2021-31007
• CVE-2021-31013
• CVE-2021-31000
• CVE-2021-30977
• CVE-2021-30939
• CVE-2021-30981
• CVE-2021-30996
• CVE-2021-30982
• CVE-2021-30937
• CVE-2021-30927
• CVE-2021-30980
• CVE-2021-30949
• CVE-2021-30993
• CVE-2021-30955
• CVE-2021-30976
• CVE-2021-30990
• CVE-2021-30943
• CVE-2021-31009
• CVE-2021-30971
• CVE-2021-30973
• CVE-2021-30929
• CVE-2021-30979
• CVE-2021-30940
• CVE-2021-30941
• CVE-2021-30995
• CVE-2021-30968
• CVE-2021-30946
• CVE-2021-30947
• CVE-2021-30975
• CVE-2021-30944
• CVE-2021-30972
• CVE-2021-30767
• CVE-2021-30964
• CVE-2021-30970
• CVE-2021-30965
• CVE-2021-30938
• CVE-2021-30916
• CVE-2021-30962
• CVE-2021-30956
• CVE-2021-30992
• CVE-2021-30983
• CVE-2021-30985
• CVE-2021-30991
• CVE-2021-30998
• CVE-2021-30997
• CVE-2021-30967
• CVE-2021-30988
• CVE-2021-30932
• CVE-2021-30948

Frequently Asked Questions

• What is CVE-2021-30951?

  CVE-2021-30951 is a use after free issue in WebKit that has been addressed with improved memory management.

• Who is affected by CVE-2021-30951?

  Apple macOS Monterey, Apple Safari, Apple iOS, Apple iPadOS, Apple watchOS, and Apple tvOS versions up to, but not including, 12.1, 15.2, or 8.3 respectively are affected by CVE-2021-30951.

• How severe is CVE-2021-30951?

  The severity of CVE-2021-30951 is not explicitly mentioned.

• How can I fix CVE-2021-30951?

  To fix CVE-2021-30951, it is recommended to update to macOS Monterey version 12.1, Safari version 15.2, iOS version 15.2, iPadOS version 15.2, watchOS version 8.3, or tvOS version 15.2.

• Where can I find more information about CVE-2021-30951?

  More information about CVE-2021-30951 can be found on the Apple security updates page at the following URLs: [https://support.apple.com/en-us/HT212978](https://support.apple.com/en-us/HT212978), [https://support.apple.com/en-us/HT212980](https://support.apple.com/en-us/HT212980), [https://support.apple.com/en-us/HT212975](https://support.apple.com/en-us/HT212975).