First published: Tue Aug 24 2021(Updated: )
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Credit: Kunlun Lab via Tianfu Cup Kunlun Lab via Tianfu Cup Kunlun Lab Kunlun Lab via Tianfu Cup Kunlun Lab via Tianfu Cup Kunlun Lab via Tianfu Cup cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <15.2 | |
Apple iPadOS | <15.2 | |
Apple iPhone OS | <15.2 | |
Apple macOS | >=12.0<12.1 | |
Apple tvOS | <15.2 | |
Apple watchOS | <8.3 | |
Fedoraproject Fedora | =34 | |
Debian Debian Linux | =10.0 | |
Debian Debian Linux | =11.0 | |
Fedoraproject Fedora | =35 | |
debian/webkit2gtk | 2.36.4-1~deb10u1 2.38.6-0+deb10u1 2.40.5-1~deb11u1 2.42.1-1~deb11u2 2.40.5-1~deb12u1 2.42.1-1~deb12u1 2.42.1-2 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.42.1-1 | |
Apple tvOS | <15.2 | 15.2 |
Apple Safari | <15.2 | 15.2 |
Apple watchOS | <8.3 | 8.3 |
Apple iOS | <15.2 | 15.2 |
Apple iPadOS | <15.2 | 15.2 |
Apple macOS Monterey | <12.1 | 12.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2021-30954.
The title of the vulnerability is WebKit. A type confusion issue was addressed with improved memory handling.
The affected software includes Apple macOS Monterey 12.1, Apple iOS up to version 15.2, Apple iPadOS up to version 15.2, Apple Safari up to version 15.2, Apple watchOS up to version 8.3, and Apple tvOS up to version 15.2.
The severity of CVE-2021-30954 has not been specified.
To fix CVE-2021-30954, update your software to the latest available version provided by Apple.