First published: Tue Aug 24 2021(Updated: )
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: @18f @jq0904 DBAPP Security @18f @jq0904 DBAPP Security @18f @jq0904 DBAPP Security @18f @jq0904 DBAPP Security @18f @jq0904 DBAPP Security cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <15.2 | |
Apple iPadOS | <15.2 | |
Apple iPhone OS | <15.2 | |
Apple macOS | >=12.0<12.1 | |
Apple tvOS | <15.2 | |
Apple watchOS | <8.3 | |
Fedoraproject Fedora | =34 | |
Debian Debian Linux | =10.0 | |
Debian Debian Linux | =11.0 | |
Fedoraproject Fedora | =35 | |
debian/webkit2gtk | 2.36.4-1~deb10u1 2.38.6-0+deb10u1 2.40.5-1~deb11u1 2.42.1-1~deb11u2 2.40.5-1~deb12u1 2.42.1-1~deb12u1 2.42.1-2 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.42.1-1 | |
Apple watchOS | <8.3 | 8.3 |
Apple tvOS | <15.2 | 15.2 |
Apple Safari | <15.2 | 15.2 |
Apple iOS | <15.2 | 15.2 |
Apple iPadOS | <15.2 | 15.2 |
Apple macOS Monterey | <12.1 | 12.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30952 is a vulnerability in WebKit where an integer overflow was addressed with improved input validation.
CVE-2021-30952 affects macOS Monterey 12.1, Safari 15.2, iOS 15.2, iPadOS 15.2, watchOS 8.3, and tvOS 15.2.
To fix CVE-2021-30952, update your software to the latest available version provided by Apple.
You can find more information about CVE-2021-30952 on the Apple security advisory page linked in the references.
CVE-2021-30952 is associated with CWE-20 and CWE-190.