CVE-2021-30797: Input Validation

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2021-30797.

Q: What is the affected software?

The affected software includes Apple macOS Big Sur (version up to 11.5), Apple Safari (version up to 14.1.2), Apple watchOS (version up to 7.6), and Apple tvOS (version up to 14.7).

Q: What is the severity of CVE-2021-30797?

The severity of CVE-2021-30797 has not been mentioned in the provided information.

Q: How was CVE-2021-30797 addressed?

CVE-2021-30797 was addressed with improved checks.

Q: Where can I find more information about CVE-2021-30797?

You can find more information about CVE-2021-30797 on the following references: 1. [Apple Support - HT212605](https://support.apple.com/en-us/HT212605) 2. [Apple Support - HT212604](https://support.apple.com/en-us/HT212604) 3. [Apple Support - HT212602](https://support.apple.com/en-us/HT212602)

Published Jul 19, 2021

Updated

ActionKit. An input validation issue was addressed with improved input validation.

Other sources

AMD Kernel. A memory corruption issue was addressed with improved input validation.

— Apple

Analytics. A logic issue was addressed with improved restrictions.

— Apple

Analytics. This issue was addressed with a new entitlement.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

AppKit. An information disclosure issue was addressed by removing the vulnerable code.

— Apple

Credit

Ivan Fratric(Google Project Zero), Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Georgi Valkov (httpstorm.com), Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), ABC Research s.r.o

Affected Software

15 affected componentsFixes available

debian/webkit2gtk

2.36.4-1~deb10u12.38.6-0+deb10u12.40.5-1~deb11u12.42.1-1~deb11u22.40.5-1~deb12u12.42.1-1~deb12u12.42.1-2

debian/wpewebkit

2.38.6-1~deb11u12.38.6-12.42.1-1

Apple macOS Big Sur<11.5

11.5

Apple tvOS<14.7

14.7

Apple WatchOS<7.6

7.6

Apple Safari<14.1.2

14.1.2

Apple Safari<14.1.2

Apple iPadOS<14.7

Apple iPhone OS<14.7

Apple macOS<11.5

Apple tvOS<14.7

Apple WatchOS<7.6

redhat/webkitgtk<2.32.3

2.32.3

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Updated

via Apple·12:00 AM

Affected Software

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Jul 28, 2021

Data Sourced

via Red Hat·01:48 PM

DescriptionSeverityAffected Software

Sep 8, 2021

CVE Published

via MITRE·01:50 PM

Data Sourced

via MITRE·01:50 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-30797.

What is the affected software?

The affected software includes Apple macOS Big Sur (version up to 11.5), Apple Safari (version up to 14.1.2), Apple watchOS (version up to 7.6), and Apple tvOS (version up to 14.7).

What is the severity of CVE-2021-30797?

The severity of CVE-2021-30797 has not been mentioned in the provided information.

How was CVE-2021-30797 addressed?

CVE-2021-30797 was addressed with improved checks.

Where can I find more information about CVE-2021-30797?

You can find more information about CVE-2021-30797 on the following references: 1. [Apple Support - HT212605](https://support.apple.com/en-us/HT212605) 2. [Apple Support - HT212604](https://support.apple.com/en-us/HT212604) 3. [Apple Support - HT212602](https://support.apple.com/en-us/HT212602)

CVE-2021-30797: Input Validation

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the vulnerability ID?

What is the affected software?

What is the severity of CVE-2021-30797?

How was CVE-2021-30797 addressed?

Where can I find more information about CVE-2021-30797?

Company

Resources

Contact