CVE-2021-30909: apple ios and ipados Out-of-bounds Write
Vulnerability summary
CVE-2021-30909 is a high (CVSS 9.3) Out-of-bounds Write vulnerability in apple ios and ipados. EPSS estimates a 1.38% chance of exploitation in the next 30 days, higher than 71.5% of scored vulnerabilities.
Timeline
- 24-08-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.38%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.38% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Apple8 products
- ios and ipados≥ unspecified, < 15.1 | ≥ unspecified, < 14.8
- ipad_os< 14.8.1
- ipados15.0
- iphone_os< 14.8.1 | 15.0
- mac_os_x< 10.15.7 | 10.15.7 | 10.15.7:security_update_2020-001 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-004 | 10.15.7:security_update_2021-005 | 10.15.7:security_update_2021-006 | 10.15.7:supplemental_update
1 vendor · 8 products
References
7 links- support.apple.com/en-us/HT212869X Refsource MISC
- support.apple.com/en-us/HT212871X Refsource MISC
- support.apple.com/en-us/HT212872X Refsource MISC
- support.apple.com/en-us/HT212867X Refsource MISC
- support.apple.com/en-us/HT212868X Refsource MISC
- support.apple.com/en-us/HT212874X Refsource MISC
- support.apple.com/en-us/HT212876X Refsource MISC