CVE-2021-30748: Input Validation

Q: What is CVE-2021-30748?

CVE-2021-30748 is a memory corruption issue in AVEVideoEncoder that has been addressed with improved state management.

Q: How does CVE-2021-30748 impact Apple tvOS?

CVE-2021-30748 affects Apple tvOS up to version 14.7.

Q: How does CVE-2021-30748 impact Apple macOS Big Sur?

CVE-2021-30748 affects Apple macOS Big Sur up to version 11.5.

Q: How can I fix CVE-2021-30748 on Apple tvOS?

To fix CVE-2021-30748 on Apple tvOS, update to version 14.7 or later.

Q: How can I fix CVE-2021-30748 on Apple macOS Big Sur?

To fix CVE-2021-30748 on Apple macOS Big Sur, update to version 11.5 or later.

Published Jul 19, 2021

Updated

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. An application may be able to execute arbitrary code with kernel privileges.

Other sources

ActionKit. An input validation issue was addressed with improved input validation.

— Apple

AMD Kernel. A memory corruption issue was addressed with improved input validation.

— Apple

Analytics. A logic issue was addressed with improved restrictions.

— Apple

Analytics. This issue was addressed with a new entitlement.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

Credit

George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), Georgi Valkov (httpstorm.com), Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), ABC Research s.r.o

Affected Software

8 affected componentsFixes available

Apple macOS Big Sur<11.5

11.5

Apple tvOS<14.7

14.7

Apple iPadOS<14.7

Apple iPhone OS<14.7

Apple macOS<11.5

Apple tvOS<14.7

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Sep 8, 2021

CVE Published

via MITRE·01:44 PM

Data Sourced

via MITRE·01:44 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2021-30748?

CVE-2021-30748 is a memory corruption issue in AVEVideoEncoder that has been addressed with improved state management.

How does CVE-2021-30748 impact Apple tvOS?

CVE-2021-30748 affects Apple tvOS up to version 14.7.

How does CVE-2021-30748 impact Apple macOS Big Sur?

CVE-2021-30748 affects Apple macOS Big Sur up to version 11.5.

How can I fix CVE-2021-30748 on Apple tvOS?

To fix CVE-2021-30748 on Apple tvOS, update to version 14.7 or later.

How can I fix CVE-2021-30748 on Apple macOS Big Sur?

To fix CVE-2021-30748 on Apple macOS Big Sur, update to version 11.5 or later.

CVE-2021-30748: Input Validation

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30748?

How does CVE-2021-30748 impact Apple tvOS?

How does CVE-2021-30748 impact Apple macOS Big Sur?

How can I fix CVE-2021-30748 on Apple tvOS?

How can I fix CVE-2021-30748 on Apple macOS Big Sur?

Company

Resources

Contact