CVE-2021-30961: Buffer Overflow
First published: Tue Aug 24 2021(Updated: )
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
Credit: JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light cve@mitre.org JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Catalina | ||
| Apple macOS | <11.6.2 | 11.6.2 |
| macOS Yosemite | >=10.15<=10.15.7 | |
| macOS Yosemite | =10.15.7-security_update_2020-001 | |
| macOS Yosemite | =10.15.7-security_update_2021-001 | |
| macOS Yosemite | =10.15.7-security_update_2021-002 | |
| macOS Yosemite | =10.15.7-security_update_2021-003 | |
| macOS Yosemite | =10.15.7-security_update_2021-004 | |
| macOS Yosemite | =10.15.7-security_update_2021-005 | |
| macOS Yosemite | =10.15.7-security_update_2021-006 | |
| macOS Yosemite | =10.15.7-security_update_2021-007 | |
| Apple macOS | >=11.0<11.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212979 (Advisory)
- https://support.apple.com/en-us/HT212981 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30950
- CVE-2021-30931
- CVE-2021-30935
- CVE-2021-30942
- CVE-2021-30958
- CVE-2021-30959
- CVE-2021-30961
- CVE-2021-30963
- CVE-2021-30945
- CVE-2021-30977
- CVE-2021-30969
- CVE-2021-30939
- CVE-2021-30981
- CVE-2021-30982
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30937
- CVE-2021-30949
- CVE-2021-30990
- CVE-2021-30976
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30973
- CVE-2021-30971
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30975
- CVE-2021-30767
- CVE-2021-30965
- CVE-2021-30938
- CVE-2021-30957
- CVE-2021-30962
- CVE-2021-31007
- CVE-2021-31013
- CVE-2021-30895
- CVE-2021-30947
- CVE-2021-30946
- CVE-2021-31002
- CVE-2021-30970
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-30961.
What is the title of this vulnerability?
The title of this vulnerability is 'CoreAudio. A buffer overflow issue was addressed with improved memory handling.'
What software is affected by this vulnerability?
The affected software includes macOS Big Sur (up to version 11.6.2) and macOS Catalina.
What is the severity of CVE-2021-30961?
The severity of CVE-2021-30961 has not been specified in the provided information.
How do I fix the CVE-2021-30961 vulnerability?
To fix the CVE-2021-30961 vulnerability, update macOS Big Sur to version 11.6.2 or later as recommended by Apple.
- collector/apple-support
- alias/CVE-2021-30961
- alias/CVE-2021-30963
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- vendor/apple
- canonical/apple catalina
- canonical/apple macos
- canonical/macos yosemite
- version/macos yosemite/10.15
- version/macos yosemite/10.15.7
- version/macos yosemite/10.15.7-security_update_2020-001
- version/macos yosemite/10.15.7-security_update_2021-001
- version/macos yosemite/10.15.7-security_update_2021-002
- version/macos yosemite/10.15.7-security_update_2021-003
- version/macos yosemite/10.15.7-security_update_2021-004
- version/macos yosemite/10.15.7-security_update_2021-005
- version/macos yosemite/10.15.7-security_update_2021-006
- version/macos yosemite/10.15.7-security_update_2021-007
- version/apple macos/11.0