CVE-2021-30963: Buffer Overflow
First published: Tue Aug 24 2021(Updated: )
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.
Credit: JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light cve@mitre.org JunDong Xie Ant Security LightJunDong Xie Ant Security LightJunDong Xie Ant Security Light
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mac OS X | >=10.15<=10.15.7 | |
| Apple Mac OS X | =10.15.7-security_update_2020-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-001 | |
| Apple Mac OS X | =10.15.7-security_update_2021-002 | |
| Apple Mac OS X | =10.15.7-security_update_2021-003 | |
| Apple Mac OS X | =10.15.7-security_update_2021-004 | |
| Apple Mac OS X | =10.15.7-security_update_2021-005 | |
| Apple Mac OS X | =10.15.7-security_update_2021-006 | |
| Apple Mac OS X | =10.15.7-security_update_2021-007 | |
| Apple macOS | >=11.0<11.6.2 | |
| Apple macOS Big Sur | <11.6.2 | 11.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT212979 (Advisory)
- https://support.apple.com/en-us/HT212981 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2021-30950
- CVE-2021-30931
- CVE-2021-30935
- CVE-2021-30942
- CVE-2021-30958
- CVE-2021-30959
- CVE-2021-30961
- CVE-2021-30963
- CVE-2021-30945
- CVE-2021-30977
- CVE-2021-30969
- CVE-2021-30939
- CVE-2021-30981
- CVE-2021-30982
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30937
- CVE-2021-30949
- CVE-2021-30990
- CVE-2021-30976
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30973
- CVE-2021-30971
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30975
- CVE-2021-30767
- CVE-2021-30965
- CVE-2021-30938
- CVE-2021-30957
- CVE-2021-30962
- CVE-2021-31007
- CVE-2021-31013
- CVE-2021-30895
- CVE-2021-30947
- CVE-2021-30946
- CVE-2021-31002
- CVE-2021-30970
Frequently Asked Questions
What is CVE-2021-30963?
CVE-2021-30963 is a vulnerability in CoreAudio that allows for a buffer overflow issue due to inadequate memory handling.
What software is affected by CVE-2021-30963?
CVE-2021-30963 affects macOS Big Sur version up to and exclusive of 11.6.2, as well as Apple Catalina.
How can I fix CVE-2021-30963?
To fix CVE-2021-30963, update macOS Big Sur to version 11.6.2 or later, and apply any recommended security patches for Apple Catalina.
What is the severity of CVE-2021-30963?
The severity of CVE-2021-30963 is not specified.
Where can I find more information about CVE-2021-30963?
You can find more information about CVE-2021-30963 in the references provided by Apple: https://support.apple.com/en-us/HT212979 and https://support.apple.com/en-us/HT212981.
- collector/apple-support
- alias/CVE-2021-30961
- alias/CVE-2021-30963
- collector/nvd-index
- agent/severity
- agent/type
- agent/event
- agent/first-publish-date
- agent/software-canonical-lookup-request
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/author
- agent/softwarecombine
- agent/description
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple catalina
- canonical/apple mac os x
- version/apple mac os x/10.15
- version/apple mac os x/10.15.7
- version/apple mac os x/10.15.7-security_update_2020-001
- version/apple mac os x/10.15.7-security_update_2021-001
- version/apple mac os x/10.15.7-security_update_2021-002
- version/apple mac os x/10.15.7-security_update_2021-003
- version/apple mac os x/10.15.7-security_update_2021-004
- version/apple mac os x/10.15.7-security_update_2021-005
- version/apple mac os x/10.15.7-security_update_2021-006
- version/apple mac os x/10.15.7-security_update_2021-007
- canonical/apple macos
- version/apple macos/11.0
- canonical/apple macos big sur