CVE-2021-30758: Input Validation

Q: What is CVE-2021-30758?

CVE-2021-30758 is a type confusion issue in WebKit that has been addressed with improved state handling.

Q: Which software is affected by CVE-2021-30758?

The following software is affected by CVE-2021-30758: macOS Big Sur (up to version 11.5), Safari (up to version 14.1.2), watchOS (up to version 7.6), and tvOS (up to version 14.7).

Q: How can I fix the CVE-2021-30758 vulnerability?

To fix the CVE-2021-30758 vulnerability, you should update your affected software to the latest available version. Please refer to the vendor's official support page for more information.

Q: Where can I find more information about CVE-2021-30758?

You can find more information about CVE-2021-30758 on Apple's support page at the following URLs: [support.apple.com/en-us/HT212605](https://support.apple.com/en-us/HT212605), [support.apple.com/en-us/HT212604](https://support.apple.com/en-us/HT212604), [support.apple.com/en-us/HT212602](https://support.apple.com/en-us/HT212602).

Q: Is CVE-2021-30758 a critical vulnerability?

The severity of CVE-2021-30758 has not been mentioned. Please refer to the vendor's official support page or security advisories for more information.

Published Jul 19, 2021

Updated

A type confusion issue was addressed with improved state handling.

Other sources

ActionKit. An input validation issue was addressed with improved input validation.

— Apple

AMD Kernel. A memory corruption issue was addressed with improved input validation.

— Apple

Analytics. A logic issue was addressed with improved restrictions.

— Apple

Analytics. This issue was addressed with a new entitlement.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

Credit

Christoph Guttandin(Media Codings), Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Georgi Valkov (httpstorm.com), Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), ABC Research s.r.o

Affected Software

14 affected componentsFixes available

debian/webkit2gtk

2.36.4-1~deb10u12.38.6-0+deb10u12.40.5-1~deb11u12.42.1-1~deb11u22.40.5-1~deb12u12.42.1-1~deb12u12.42.1-2

debian/wpewebkit

2.38.6-1~deb11u12.38.6-12.42.1-1

Apple macOS Big Sur<11.5

11.5

Apple tvOS<14.7

14.7

Apple WatchOS<7.6

7.6

Apple Safari<14.1.2

14.1.2

Apple Safari<14.1.2

Apple iPhone OS<14.7

Apple macOS<11.5

Apple tvOS<14.7

Apple WatchOS<7.6

redhat/webkitgtk<2.32.2

2.32.2

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Jul 28, 2021

Data Sourced

via Red Hat·01:44 PM

DescriptionSeverityAffected Software

Sep 8, 2021

CVE Published

via MITRE·01:46 PM

Data Sourced

via MITRE·01:46 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2021-30758?

CVE-2021-30758 is a type confusion issue in WebKit that has been addressed with improved state handling.

Which software is affected by CVE-2021-30758?

The following software is affected by CVE-2021-30758: macOS Big Sur (up to version 11.5), Safari (up to version 14.1.2), watchOS (up to version 7.6), and tvOS (up to version 14.7).

How can I fix the CVE-2021-30758 vulnerability?

To fix the CVE-2021-30758 vulnerability, you should update your affected software to the latest available version. Please refer to the vendor's official support page for more information.

Where can I find more information about CVE-2021-30758?

You can find more information about CVE-2021-30758 on Apple's support page at the following URLs: [support.apple.com/en-us/HT212605](https://support.apple.com/en-us/HT212605), [support.apple.com/en-us/HT212604](https://support.apple.com/en-us/HT212604), [support.apple.com/en-us/HT212602](https://support.apple.com/en-us/HT212602).

Is CVE-2021-30758 a critical vulnerability?

The severity of CVE-2021-30758 has not been mentioned. Please refer to the vendor's official support page or security advisories for more information.

CVE-2021-30758: Input Validation

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30758?

Which software is affected by CVE-2021-30758?

How can I fix the CVE-2021-30758 vulnerability?

Where can I find more information about CVE-2021-30758?

Is CVE-2021-30758 a critical vulnerability?

Company

Resources

Contact