CVE-2021-30779: Input Validation

Q: What is CVE-2021-30779?

CVE-2021-30779 is a vulnerability in ImageIO that has been addressed with improved checks.

Q: Which software versions are affected by CVE-2021-30779?

CVE-2021-30779 affects Apple watchOS up to version 7.6, Apple tvOS up to version 14.7, Apple iTunes for Windows up to version 12.11.4, Apple macOS Big Sur up to version 11.5, and Apple iCloud for Windows up to version 12.5.

Q: How can I fix CVE-2021-30779?

To fix CVE-2021-30779, it is recommended to update the affected software versions to the latest available version by following the instructions provided by Apple in their support articles.

Q: Where can I find more information about CVE-2021-30779?

You can find more information about CVE-2021-30779 on Apple's support website. Here are the reference links provided by Apple: [link1], [link2], [link3].

Published Jul 19, 2021

Updated

ActionKit. An input validation issue was addressed with improved input validation.

Other sources

AMD Kernel. A memory corruption issue was addressed with improved input validation.

— Apple

Analytics. A logic issue was addressed with improved restrictions.

— Apple

Analytics. This issue was addressed with a new entitlement.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

AppKit. An information disclosure issue was addressed by removing the vulnerable code.

— Apple

Credit

Jzhu, Ye Zhang@@co0py_Cat(Baidu Security), Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Georgi Valkov (httpstorm.com), Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), ABC Research s.r.o

Affected Software

11 affected componentsFixes available

Apple macOS Big Sur<11.5

11.5

Apple tvOS<14.7

14.7

Apple WatchOS<7.6

7.6

Apple iCloud for Windows<12.5

12.5

Apple iTunes for Windows<12.11.4

12.11.4

Apple iPhone OS<14.7

Apple macOS<11.5

Apple tvOS<14.7

Apple WatchOS<7.6

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Sep 8, 2021

CVE Published

via MITRE·01:47 PM

Data Sourced

via MITRE·01:47 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2021-30779?

CVE-2021-30779 is a vulnerability in ImageIO that has been addressed with improved checks.

Which software versions are affected by CVE-2021-30779?

CVE-2021-30779 affects Apple watchOS up to version 7.6, Apple tvOS up to version 14.7, Apple iTunes for Windows up to version 12.11.4, Apple macOS Big Sur up to version 11.5, and Apple iCloud for Windows up to version 12.5.

How can I fix CVE-2021-30779?

To fix CVE-2021-30779, it is recommended to update the affected software versions to the latest available version by following the instructions provided by Apple in their support articles.

Where can I find more information about CVE-2021-30779?

You can find more information about CVE-2021-30779 on Apple's support website. Here are the reference links provided by Apple: [link1], [link2], [link3].

CVE-2021-30779: Input Validation

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30779?

Which software versions are affected by CVE-2021-30779?

How can I fix CVE-2021-30779?

Where can I find more information about CVE-2021-30779?

Company

Resources

Contact