CVE-2021-30919: apple ios and ipados Out-of-bounds Write
Vulnerability summary
CVE-2021-30919 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in apple ios and ipados. EPSS estimates a 1.57% chance of exploitation in the next 30 days, higher than 75% of scored vulnerabilities.
Timeline
- 24-08-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. Processing a maliciously crafted PDF may lead to arbitrary code execution.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.57%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
0.00 pp
From 1.57% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Apple8 products
- ios and ipados≥ unspecified, < 15.1 | ≥ unspecified, < 14.8
- ipad_os< 14.8.1
- ipados15.0
- iphone_os< 14.8.1 | 15.0
- mac_os_x< 10.15.7 | 10.15.7 | 10.15.7:security_update_2020-001 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-004 | 10.15.7:security_update_2021-005 | 10.15.7:security_update_2021-006 | 10.15.7:supplemental_update
1 vendor · 8 products
References
8 links- support.apple.com/en-us/HT212869X Refsource MISC
- support.apple.com/en-us/HT212871X Refsource MISC
- support.apple.com/en-us/HT212872X Refsource MISC
- support.apple.com/en-us/HT212867X Refsource MISC
- support.apple.com/en-us/HT212868X Refsource MISC
- support.apple.com/en-us/HT212874X Refsource MISC
- support.apple.com/en-us/HT212876X Refsource MISC
- www.zerodayinitiative.com/advisories/ZDI-22-357/X Refsource MISC