CVE-2021-30842

moderate-risk

Published 2021-10-19

This issue was addressed with improved checks. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted dfont file may lead to arbitrary code execution.

Do I need to act?

0.27% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (16)

Ipados

Iphone Os

Mac Os X

Macos

Tvos

Watchos

Affected Vendors

Apple

References (18)

Mailing List http://seclists.org/fulldisclosure/2021/Oct/61

Mailing List http://seclists.org/fulldisclosure/2021/Oct/62

Mailing List http://seclists.org/fulldisclosure/2021/Oct/63

Release Notes https://support.apple.com/en-us/HT212804

Release Notes https://support.apple.com/en-us/HT212805

Release Notes https://support.apple.com/en-us/HT212807

Release Notes https://support.apple.com/en-us/HT212814

Release Notes https://support.apple.com/en-us/HT212815

Release Notes https://support.apple.com/en-us/HT212819