CVE-2021-30956
First published: Tue Aug 24 2021(Updated: )
A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 15.2 and iPadOS 15.2. An attacker with physical access to a device may be able to see private contact information.
Credit: Akiva Fordsham Rishon Group cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <15.2 | |
| Apple iPhone OS | <15.2 | |
| Apple iOS | <15.2 | 15.2 |
| Apple iPadOS | <15.2 | 15.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212976 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30960
- CVE-2021-30966
- CVE-2021-30926
- CVE-2021-30942
- CVE-2021-30957
- CVE-2021-30958
- CVE-2021-30945
- CVE-2021-30956
- CVE-2021-30992
- CVE-2021-31013
- CVE-2021-31000
- CVE-2021-30939
- CVE-2021-30996
- CVE-2021-30983
- CVE-2021-30985
- CVE-2021-30991
- CVE-2021-30937
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30949
- CVE-2021-30993
- CVE-2021-30955
- CVE-2021-30998
- CVE-2021-30997
- CVE-2021-30943
- CVE-2021-31009
- CVE-2021-30971
- CVE-2021-30973
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30967
- CVE-2021-30988
- CVE-2021-30932
- CVE-2021-30948
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30946
- CVE-2021-30947
- CVE-2021-30944
- CVE-2021-30767
- CVE-2021-30964
- CVE-2021-30934
- CVE-2021-30936
- CVE-2021-30951
- CVE-2021-30952
- CVE-2021-30984
- CVE-2021-30953
- CVE-2021-30954
Frequently Asked Questions
What is CVE-2021-30956?
CVE-2021-30956 is a lock screen issue in FaceTime that allowed access to contacts on a locked device.
How was CVE-2021-30956 addressed?
CVE-2021-30956 was addressed with improved state management.
Which devices are affected by CVE-2021-30956?
Devices running Apple iOS and iPadOS versions up to and exclusive of 15.2 are affected by CVE-2021-30956.
How can I fix CVE-2021-30956?
To fix CVE-2021-30956, update your device to Apple iOS or iPadOS version 15.2 or later.
Where can I find more information about CVE-2021-30956?
You can find more information about CVE-2021-30956 on Apple's support page: https://support.apple.com/en-us/HT212976
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/references
- agent/tags
- agent/event
- agent/severity
- agent/author
- agent/description
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple ios
- canonical/apple ipados
- canonical/apple iphone os