CVE-2021-30926

State: PUBLISHED · Published: 2021-08-24 · Updated: 2024-08-03 · Assigner: apple

Description

Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution.

CWE

(none)

Affected

Apple / watchOS — v=unspecified <8.3 [affected]
Apple / iOS and iPadOS — v=unspecified <15.2 [affected]
Apple / macOS — v=unspecified <12.1 [affected]
Apple / macOS — v=unspecified <15.2 [affected]

CVSS

(none)

References

https://support.apple.com/kb/HT212871 x_refsource_CONFIRM
https://support.apple.com/kb/HT212872 x_refsource_CONFIRM
https://support.apple.com/kb/HT212868 x_refsource_CONFIRM
https://support.apple.com/en-us/HT212975 x_refsource_MISC
https://support.apple.com/en-us/HT212976 x_refsource_MISC
https://support.apple.com/en-us/HT212978 x_refsource_MISC
https://support.apple.com/en-us/HT212980 x_refsource_MISC

Source

cvelistV5-main/cves/2021/30xxx/CVE-2021-30926.json