CVE-2021-30860: Apple Multiple Products Integer Overflow Vulnerability
Published Aug 24, 2021
·Updated
CoreGraphics. An integer overflow was addressed with improved input validation.
Credit
The Citizen Lab, The Citizen Lab, The Citizen Lab, The Citizen Lab, The Citizen Lab
Affected Software
22 affected componentsFixes available
Apple macOS Big Sur<11.6
11.6
Apple Catalina
Apple WatchOS<7.6.2
7.6.2
Apple iOS<12.5.5
12.5.5
Apple Multiple Products
Apple iOS<14.8
14.8
Apple iPadOS<14.8
14.8
Apple iPadOS<14.8
Apple iPhone OS<12.5.5
Apple iPhone OS>=13.0<14.8
Apple iOS and macOS>=10.15<10.15.7
Apple iOS and macOS=10.15.7
Apple iOS and macOS=10.15.7-security_update_2020
Apple iOS and macOS=10.15.7-security_update_2020-001
Apple iOS and macOS=10.15.7-security_update_2021-001
Apple iOS and macOS=10.15.7-security_update_2021-002
Apple iOS and macOS=10.15.7-security_update_2021-003
Apple iOS and macOS=10.15.7-security_update_2021-004
Apple macOS<11.6
Apple WatchOS<7.6.2
Xpdfreader Xpdf<4.04
Freedesktop poppler<22.09.0
Event History
Aug 24, 2021
CVE Published
via MITRE·06:49 PM
Data Sourced
via MITRE·06:49 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Nov 3, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is CVE-2021-30860?
CVE-2021-30860 is an integer overflow vulnerability in Apple iOS, iPadOS, macOS, and watchOS CoreGraphics that allows code execution when processing a maliciously crafted PDF.
2
How can the CVE-2021-30860 vulnerability be exploited?
The CVE-2021-30860 vulnerability can be exploited by processing a specially crafted PDF file.
3
Which Apple products are affected by CVE-2021-30860?
Apple iOS, iPadOS, macOS, and watchOS are affected by CVE-2021-30860.
4
What is the severity of CVE-2021-30860?
The severity of CVE-2021-30860 is not specified in the provided information.
5
How can I fix the CVE-2021-30860 vulnerability?
To fix the CVE-2021-30860 vulnerability, update to the recommended versions of Apple iOS, iPadOS, macOS, and watchOS as provided by Apple.