First published: Tue Aug 24 2021(Updated: )
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
Credit: JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light cve@mitre.org JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mac OS X | >=10.15<=10.15.7 | |
Apple Mac OS X | =10.15.7-security_update_2020-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-001 | |
Apple Mac OS X | =10.15.7-security_update_2021-002 | |
Apple Mac OS X | =10.15.7-security_update_2021-003 | |
Apple Mac OS X | =10.15.7-security_update_2021-004 | |
Apple Mac OS X | =10.15.7-security_update_2021-005 | |
Apple Mac OS X | =10.15.7-security_update_2021-006 | |
Apple Mac OS X | =10.15.7-security_update_2021-007 | |
Apple macOS | >=11.0<11.6.2 | |
Apple macOS Big Sur | <11.6.2 | 11.6.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-30963 is a vulnerability in CoreAudio that allows for a buffer overflow issue due to inadequate memory handling.
CVE-2021-30963 affects macOS Big Sur version up to and exclusive of 11.6.2, as well as Apple Catalina.
To fix CVE-2021-30963, update macOS Big Sur to version 11.6.2 or later, and apply any recommended security patches for Apple Catalina.
The severity of CVE-2021-30963 is not specified.
You can find more information about CVE-2021-30963 in the references provided by Apple: https://support.apple.com/en-us/HT212979 and https://support.apple.com/en-us/HT212981.