CVE-2021-30760
Description
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.
CWE
- (none)
Affected
- Apple / Security Update - Catalina — v=unspecified <2021 [affected]
- Apple / iOS — v=unspecified <14.7 [affected]
- Apple / macOS — v=unspecified <11.5 [affected]
- Apple / macOS — v=unspecified <2021 [affected]
- Apple / macOS — v=unspecified <14.7 [affected]
- Apple / macOS — v=unspecified <7.6 [affected]
CVSS
- (none)
References
- https://support.apple.com/en-us/HT212601 x_refsource_MISC
- https://support.apple.com/en-us/HT212602 x_refsource_MISC
- https://support.apple.com/en-us/HT212605 x_refsource_MISC
- https://support.apple.com/en-us/HT212600 x_refsource_MISC
- https://support.apple.com/en-us/HT212603 x_refsource_MISC
- https://support.apple.com/en-us/HT212604 x_refsource_MISC
Source
cvelistV5-main/cves/2021/30xxx/CVE-2021-30760.json