CVE-2021-36976: Input Validation

Reference Links

• https://support.apple.com/en-us/HT213183 (Advisory)
• https://support.apple.com/en-us/HT213193 (Advisory)
• http://seclists.org/fulldisclosure/2022/Mar/27
• http://seclists.org/fulldisclosure/2022/Mar/28
• http://seclists.org/fulldisclosure/2022/Mar/29
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32375
• https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libarchive/OSV-2021-557.yaml
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SE5NJQNM22ZE5Z55LPAGCUHSBQZBKMKC/
• https://security.gentoo.org/glsa/202208-26
• https://support.apple.com/kb/HT213182
• https://support.apple.com/kb/HT213183
• https://support.apple.com/kb/HT213193
• https://support.apple.com/en-us/HT213182 (Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SE5NJQNM22ZE5Z55LPAGCUHSBQZBKMKC/

Parent vulnerabilities

(Appears in the following advisories)

• HT213183
• HT213193
• HT213182

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-22633
• CVE-2022-22669
• CVE-2022-22665
• CVE-2022-22630
• CVE-2022-22631
• CVE-2022-22625
• CVE-2022-22648
• CVE-2022-22626
• CVE-2022-22627
• CVE-2022-22597
• CVE-2022-22616
• CVE-2022-22663
• CVE-2022-26691
• CVE-2021-22946
• CVE-2021-22947
• CVE-2021-22945
• CVE-2022-22643
• CVE-2022-22657
• CVE-2022-22664
• CVE-2021-30977
• CVE-2022-22611
• CVE-2022-22612
• CVE-2022-46706
• CVE-2022-22661
• CVE-2022-22641
• CVE-2022-22613
• CVE-2022-22614
• CVE-2022-22615
• CVE-2022-22632
• CVE-2022-22638
• CVE-2022-22640
• CVE-2021-30946
• CVE-2021-36976
• CVE-2022-21658
• CVE-2022-22647
• CVE-2022-22656
• CVE-2022-22672
• CVE-2022-22644
• CVE-2022-26690
• CVE-2022-26688
• CVE-2022-22617
• CVE-2022-22609
• CVE-2022-22650
• CVE-2022-22655
• CVE-2022-22600
• CVE-2022-22599
• CVE-2022-22651
• CVE-2022-22639
• CVE-2022-22660
• CVE-2022-22621
• CVE-2021-4136
• CVE-2021-4166
• CVE-2021-4173
• CVE-2021-4187
• CVE-2021-4192
• CVE-2021-4193
• CVE-2021-46059
• CVE-2022-0128
• CVE-2022-0156
• CVE-2022-0158
• CVE-2021-30918
• CVE-2022-22662
• CVE-2022-22610
• CVE-2022-22624
• CVE-2022-22628
• CVE-2022-22629
• CVE-2022-22637
• CVE-2022-22668
• CVE-2022-22582
• CVE-2022-22666
• CVE-2022-22596
• CVE-2022-22670
• CVE-2022-22618
• CVE-2022-22654
• CVE-2022-22634
• CVE-2022-22635
• CVE-2022-22636
• CVE-2022-22652
• CVE-2022-22598
• CVE-2022-22642
• CVE-2022-22667
• CVE-2022-22653
• CVE-2022-22622
• CVE-2022-22659
• CVE-2022-22671

Frequently Asked Questions

• What is CVE-2021-36976?

  CVE-2021-36976 is a vulnerability in libarchive that involves multiple memory corruption issues.

• What software is affected by CVE-2021-36976?

  Software affected by CVE-2021-36976 includes macOS Monterey 12.3, watchOS up to 8.5, iOS up to 15.4, and iPadOS up to 15.4.

• How can I fix CVE-2021-36976?

  To fix CVE-2021-36976, update your software to the versions specified in the reference links provided.

• Where can I find more information about CVE-2021-36976?

  You can find more information about CVE-2021-36976 at the reference links provided.

• What is the Common Weakness Enumeration (CWE) ID for CVE-2021-36976?

  The Common Weakness Enumeration (CWE) ID for CVE-2021-36976 is CWE-20.