CVE-2021-30778: Race Condition

Q: What is CVE-2021-30778?

CVE-2021-30778 is a vulnerability in Kext Management in macOS Big Sur 11.5.

Q: How does CVE-2021-30778 affect macOS Big Sur?

CVE-2021-30778 affects macOS Big Sur 11.5 and earlier versions.

Q: How was CVE-2021-30778 addressed?

CVE-2021-30778 was addressed with improved entitlements.

Q: What is the severity of CVE-2021-30778?

The severity of CVE-2021-30778 is not mentioned in the provided information.

Q: Where can I find more information about CVE-2021-30778?

You can find more information about CVE-2021-30778 in the Apple support article: [https://support.apple.com/en-us/HT212602](https://support.apple.com/en-us/HT212602).

Published Jul 21, 2021

Updated

AMD Kernel. A memory corruption issue was addressed with improved input validation.

Other sources

Analytics. A logic issue was addressed with improved restrictions.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

AppKit. An information disclosure issue was addressed by removing the vulnerable code.

— Apple

Audio. This issue was addressed with improved checks.

— Apple

AVEVideoEncoder. A memory corruption issue was addressed with improved state management.

— Apple

Credit

Csaba Fitzl@@theevilbit(Offensive Security), Denis Tokarev@@illusionofcha0s, hjy79425575(Trend Micro Zero Day Initiative), tr3e, George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Tim Michaud@@TimGMichaud(Zoom Video Communications), Gary Nield(ECSC Group plc), Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Linus Henze (pinauten.de), Wojciech Reguła@@_r3ggi(SecuRing), tr3e(Trend Micro Zero Day Initiative), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), Anonymous(Trend Micro Zero Day Initiative), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), CVE-2021-3518, Georgi Valkov (httpstorm.com), Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), ABC Research s.r.o

Affected Software

2 affected componentsFixes available

Apple macOS Big Sur<11.5

11.5

macOS>=11.0<11.5

Event History

Jul 21, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Sep 8, 2021

CVE Published

via MITRE·01:48 PM

Data Sourced

via MITRE·01:48 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is CVE-2021-30778?

CVE-2021-30778 is a vulnerability in Kext Management in macOS Big Sur 11.5.

How does CVE-2021-30778 affect macOS Big Sur?

CVE-2021-30778 affects macOS Big Sur 11.5 and earlier versions.

How was CVE-2021-30778 addressed?

CVE-2021-30778 was addressed with improved entitlements.

What is the severity of CVE-2021-30778?

The severity of CVE-2021-30778 is not mentioned in the provided information.

Where can I find more information about CVE-2021-30778?

You can find more information about CVE-2021-30778 in the Apple support article: [https://support.apple.com/en-us/HT212602](https://support.apple.com/en-us/HT212602).

CVE-2021-30778: Race Condition

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30778?

How does CVE-2021-30778 affect macOS Big Sur?

How was CVE-2021-30778 addressed?

What is the severity of CVE-2021-30778?

Where can I find more information about CVE-2021-30778?

Company

Resources

Contact