CVE-2021-1838: High severity apple ios and ipados vulnerability
Published Jan 26, 2021
·Updated
ImageIO. This issue was addressed with improved checks.
Other sources
This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.
Credit
Mickey Jin & Qi Sun(Trend Micro working with Trend Micro), Xingwei Lin(Ant Security Light), Jeonghoon Shin@@singi21a(THEORI)
Affected Software
4 affected componentsFixes available
Apple iOS and iPadOS<14.4
14.4
Apple iOS, iPadOS, and macOS<14.4
14.4
Apple iOS, iPadOS, and macOS<14.4
iPhone OS<14.4
Event History
Sep 8, 2021
CVE Published
via MITRE·02:44 PM
Data Sourced
via MITRE·02:44 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-1761
- CVE-2021-1797
- CVE-2021-1794
- CVE-2021-1795
- CVE-2021-1796
- CVE-2021-1780
- CVE-2021-1760
- CVE-2021-1747
- CVE-2021-1776
- CVE-2021-1759
- CVE-2021-1772
- CVE-2021-1792
- CVE-2021-1786
- CVE-2021-1787
- CVE-2021-1791
- CVE-2021-1758
- CVE-2021-1773
- CVE-2021-1766
- CVE-2021-1785
- CVE-2021-1737
- CVE-2021-1738
- CVE-2021-1744
- CVE-2021-1818
- CVE-2021-1838
- CVE-2021-1742
- CVE-2021-1746
- CVE-2021-1754
- CVE-2021-1774
- CVE-2021-1793
- CVE-2021-1741
- CVE-2021-1743
- CVE-2021-1778
- CVE-2021-1783
- CVE-2021-1757
- CVE-2021-1748
- CVE-2021-1764
- CVE-2021-1750
- CVE-2021-1782
- CVE-2021-1781
- CVE-2021-1763
- CVE-2021-1768
- CVE-2021-1745
- CVE-2021-1762
- CVE-2021-1767
- CVE-2021-1753
- CVE-2021-1756
- CVE-2021-1769
- CVE-2021-1788
- CVE-2021-1789
- CVE-2021-1801
- CVE-2021-1871
- CVE-2021-1870
- CVE-2021-1799
- CVE-2021-30869
Frequently Asked Questions
1
What is CVE-2021-1838?
CVE-2021-1838 is a vulnerability in ImageIO that was addressed with improved checks.
2
Which software products are affected by CVE-2021-1838?
CVE-2021-1838 affects Apple iOS (up to version 14.4) and Apple iPadOS (up to version 14.4).
3
How can I fix CVE-2021-1838?
To fix CVE-2021-1838, update your Apple iOS or Apple iPadOS to version 14.4 or higher.
4
What is the severity of CVE-2021-1838?
The severity of CVE-2021-1838 is not specified in the available information.
5
Where can I find more information about CVE-2021-1838?
More information about CVE-2021-1838 can be found on the official Apple support page: https://support.apple.com/en-us/HT212146