CVE-2021-30798: Input Validation

Q: What is CVE-2021-30798?

CVE-2021-30798 is a logic issue in TCC (Transparency, Consent, and Control) that was addressed by Apple with improved state management.

Q: How does CVE-2021-30798 affect Apple watchOS?

CVE-2021-30798 affects Apple watchOS versions up to, but not including, 7.6.

Q: How does CVE-2021-30798 affect Apple macOS Big Sur?

CVE-2021-30798 affects Apple macOS Big Sur versions up to, but not including, 11.5.

Q: How can I fix CVE-2021-30798 on Apple watchOS?

To fix CVE-2021-30798 on Apple watchOS, update to version 7.6 or later.

Q: How can I fix CVE-2021-30798 on Apple macOS Big Sur?

To fix CVE-2021-30798 on Apple macOS Big Sur, update to version 11.5 or later.

Published Jul 19, 2021

Updated

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6. A malicious application may be able to bypass certain Privacy preferences.

Other sources

ActionKit. An input validation issue was addressed with improved input validation.

— Apple

AMD Kernel. A memory corruption issue was addressed with improved input validation.

— Apple

Analytics. A logic issue was addressed with improved restrictions.

— Apple

Analytics. This issue was addressed with a new entitlement.

— Apple

App Store. A permissions issue was addressed with improved validation.

— Apple

Credit

Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Zachary Keffaber@@QuickUpdate5, Denis Tokarev@@illusionofcha0s, tr3e, George Nosenko, JunDong Xie(Ant Security Light), ryuzaki, Mickey Jin@@patch1t(Trend Micro), Sunglin(Knownsec 404 team), Yizhuo Wang(Group of Software Security In Progress), Tim Michaud@@TimGMichaud(Zoom Video Communications), Linus Henze (pinauten.de), Csaba Fitzl@@theevilbit(Offensive Security), tr3e(Trend Micro Zero Day Initiative), hjy79425575(Trend Micro Zero Day Initiative), Matthew Denton(Google Chrome Security), Jzhu(Baidu Security), Ye Zhang@@co0py_Cat(Baidu Security), CFF(Topsec Alpha Team), CVE-2021-3518, CVE-2018-25010, CVE-2018-25011, CVE-2018-25014, CVE-2020-36328, CVE-2020-36329, CVE-2020-36330, CVE-2020-36331, Anonymous(Trend Micro Zero Day Initiative), Christoph Guttandin(Media Codings), Sergei Glazunov(Google Project Zero), Ivan Fratric(Google Project Zero), vm_call, Nozhdar Abdulkhaleq Shukri, Mickey Jin@@patch1t(Trend Micro working with Trend Micro Zero Day Initiative), Georgi Valkov (httpstorm.com), Zhongcheng Li (CK01), Ron Waisberg@@epsilan, Gary Nield(ECSC Group plc), Wojciech Reguła@@_r3ggi(SecuRing), Matt Shockley (twitter.com/mattshockl)(Offensive Security), Liu Long(Ant Security Light), Yinyi Wu@@3ndy1(Qihoo 360 Vulcan Team), Zuozhi Fan@@pattern_F_(Ant Security TianQiong Lab), ABC Research s.r.o

Affected Software

7 affected componentsFixes available

Apple macOS Big Sur<11.5

11.5

Apple WatchOS<7.6

7.6

Apple iPhone OS<14.7

Apple macOS<11.5

Apple WatchOS<7.6

Apple iOS<14.7

14.7

Apple iPadOS<14.7

14.7

Event History

Jul 19, 2021

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Jul 21, 2021

Updated

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

Affected Software

Sep 8, 2021

CVE Published

via MITRE·01:38 PM

Data Sourced

via MITRE·01:38 PM

DescriptionWeakness

Feb 24, 2026

Updated

via Apple·07:00 PM

DescriptionWeaknessAffected Software

Updated

via Apple·07:00 PM

DescriptionAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2021-30798?

CVE-2021-30798 is a logic issue in TCC (Transparency, Consent, and Control) that was addressed by Apple with improved state management.

How does CVE-2021-30798 affect Apple watchOS?

CVE-2021-30798 affects Apple watchOS versions up to, but not including, 7.6.

How does CVE-2021-30798 affect Apple macOS Big Sur?

CVE-2021-30798 affects Apple macOS Big Sur versions up to, but not including, 11.5.

How can I fix CVE-2021-30798 on Apple watchOS?

To fix CVE-2021-30798 on Apple watchOS, update to version 7.6 or later.

How can I fix CVE-2021-30798 on Apple macOS Big Sur?

To fix CVE-2021-30798 on Apple macOS Big Sur, update to version 11.5 or later.

CVE-2021-30798: Input Validation

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is CVE-2021-30798?

How does CVE-2021-30798 affect Apple watchOS?

How does CVE-2021-30798 affect Apple macOS Big Sur?

How can I fix CVE-2021-30798 on Apple watchOS?

How can I fix CVE-2021-30798 on Apple macOS Big Sur?

Company

Resources

Contact