CVE-2021-30825: Apple macOS CoreML MLMODEL File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
CoreML. This issue was addressed with improved checks.
Other sources
This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreML library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the CoreML framework. Crafted data in an mlmodel file can trigger a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30837
- CVE-2021-30811
- CVE-2021-30838
- CVE-2021-30866
- CVE-2021-30834
- CVE-2021-30928
- CVE-2021-30825
- CVE-2021-30863
- CVE-2021-30816
- CVE-2021-30882
- CVE-2021-30831
- CVE-2021-30840
- CVE-2021-30841
- CVE-2021-30842
- CVE-2021-30843
- CVE-2021-30852
- CVE-2021-30867
- CVE-2021-30814
- CVE-2021-30835
- CVE-2021-30847
- CVE-2021-30857
- CVE-2013-0340
- CVE-2021-30819
- CVE-2021-30874
- CVE-2021-30855
- CVE-2021-30854
- CVE-2021-30898
- CVE-2021-30870
- CVE-2021-30925
- CVE-2021-30808
- CVE-2021-30815
- CVE-2021-31001
- CVE-2021-30826
- CVE-2021-31005
- CVE-2021-31008
- CVE-2021-30897
- CVE-2021-30884
- CVE-2021-30818
- CVE-2021-30836
- CVE-2021-30809
- CVE-2021-30846
- CVE-2021-30848
- CVE-2021-30849
- CVE-2021-30851
- CVE-2021-30930
- CVE-2021-30810
Frequently Asked Questions
What is CVE-2021-30825?
CVE-2021-30825 is a vulnerability in CoreML that was addressed with improved checks.
Which software versions are affected by CVE-2021-30825?
CVE-2021-30825 affects Apple iOS versions up to exclusive 15 and Apple iPadOS versions up to exclusive 15.
How was CVE-2021-30825 resolved?
CVE-2021-30825 was resolved with improved checks.
What is the severity of CVE-2021-30825?
The severity of CVE-2021-30825 has not been specified.
Is there any additional information available for CVE-2021-30825?
Yes, you can find additional information for CVE-2021-30825 at the following reference: [Link](https://support.apple.com/en-us/HT212814).