CVE-2021-30900

CVE Published 2021-08-24
Related CWE(s) CWE-787: Out-of-bounds Write
Related Vendor(s) apple
Related Product(s) ipad_os, ipados, iphone_os, macos
Exploitation Reported (CISA KEV) 2023-03-30
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References