CVE-2021-30775: Input Validation

Q: What is CVE-2021-30775?

CVE-2021-30775 is a memory corruption issue in CoreAudio that has been addressed with improved state management.

Q: Which software products are affected by CVE-2021-30775?

CVE-2021-30775 affects Apple watchOS version up to 7.6, Apple tvOS version up to 14.7, Apple Catalina, and Apple macOS Big Sur version up to 11.5.

Q: How can I fix the memory corruption issue addressed in CVE-2021-30775?

To fix the memory corruption issue addressed in CVE-2021-30775, update your Apple watchOS to version 7.6 or later, Apple tvOS to version 14.7 or later, Apple macOS Big Sur to version 11.5 or later, or apply the necessary patches provided by Apple.

Q: Where can I find more information about CVE-2021-30775?

You can find more information about CVE-2021-30775 on the Apple support page: [https://support.apple.com/en-us/HT212605](https://support.apple.com/en-us/HT212605).

Published Jul 19, 2021

Updated

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-004 Catalina. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Credit

JunDong Xie(Ant Security Light), Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, George Nosenko, ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Georgi Valkov (httpstorm.com), Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), ABC Research s.r.o

Affected Software

20 affected componentsFixes available

Apple macOS Big Sur<11.5

11.5

Apple tvOS<14.7

14.7

Apple Catalina

Apple WatchOS<7.6

7.6

Apple iPhone OS<14.7

Apple iOS and macOS>=10.15<=10.15.6

Apple iOS and macOS=10.15.7

Apple iOS and macOS=10.15.7-security_update_2020

Apple iOS and macOS=10.15.7-security_update_2020-001

Apple iOS and macOS=10.15.7-security_update_2020-005

Apple iOS and macOS=10.15.7-security_update_2020-007

Apple iOS and macOS=10.15.7-security_update_2021-001

Apple iOS and macOS=10.15.7-security_update_2021-002

Apple iOS and macOS=10.15.7-security_update_2021-003

Apple iOS and macOS=10.15.7-supplemental_update

Apple macOS<11.5

Apple tvOS<14.7

Apple WatchOS<7.6

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Sep 8, 2021

CVE Published

via MITRE·01:46 PM

Data Sourced

via MITRE·01:46 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2021-30775?

CVE-2021-30775 is a memory corruption issue in CoreAudio that has been addressed with improved state management.

Which software products are affected by CVE-2021-30775?

CVE-2021-30775 affects Apple watchOS version up to 7.6, Apple tvOS version up to 14.7, Apple Catalina, and Apple macOS Big Sur version up to 11.5.

How can I fix the memory corruption issue addressed in CVE-2021-30775?

To fix the memory corruption issue addressed in CVE-2021-30775, update your Apple watchOS to version 7.6 or later, Apple tvOS to version 14.7 or later, Apple macOS Big Sur to version 11.5 or later, or apply the necessary patches provided by Apple.

Where can I find more information about CVE-2021-30775?

You can find more information about CVE-2021-30775 on the Apple support page: [https://support.apple.com/en-us/HT212605](https://support.apple.com/en-us/HT212605).

CVE-2021-30775: Input Validation

Credit

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30775?

Which software products are affected by CVE-2021-30775?

How can I fix the memory corruption issue addressed in CVE-2021-30775?

Where can I find more information about CVE-2021-30775?

Company

Resources

Contact