CVE-2021-31013: Medium severity apple macos vulnerability
FontParser. An out-of-bounds read was addressed with improved bounds checking.
Other sources
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in the disclosure of process memory.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-30950
- CVE-2021-30931
- CVE-2021-30935
- CVE-2021-30942
- CVE-2021-30957
- CVE-2021-30962
- CVE-2021-30959
- CVE-2021-30961
- CVE-2021-30963
- CVE-2021-30958
- CVE-2021-30945
- CVE-2021-31007
- CVE-2021-31013
- CVE-2021-30895
- CVE-2021-30977
- CVE-2021-30969
- CVE-2021-30939
- CVE-2021-30981
- CVE-2021-30982
- CVE-2021-30927
- CVE-2021-30980
- CVE-2021-30937
- CVE-2021-30949
- CVE-2021-30990
- CVE-2021-30976
- CVE-2021-30929
- CVE-2021-30979
- CVE-2021-30940
- CVE-2021-30941
- CVE-2021-30973
- CVE-2021-30971
- CVE-2021-30995
- CVE-2021-30968
- CVE-2021-30947
- CVE-2021-30946
- CVE-2021-30975
- CVE-2021-31002
- CVE-2021-30767
- CVE-2021-30970
- CVE-2021-30965
- CVE-2021-30938
- CVE-2021-30960
- CVE-2021-30966
- CVE-2021-30926
- CVE-2021-31000
- CVE-2021-30916
- CVE-2021-30993
- CVE-2021-30955
- CVE-2021-30944
- CVE-2021-30934
- CVE-2021-30936
- CVE-2021-30951
- CVE-2021-30952
- CVE-2021-30984
- CVE-2021-30953
- CVE-2021-30954
- CVE-2021-30943
- CVE-2021-30964
- CVE-2021-30987
- CVE-2021-30986
- CVE-2021-30996
- CVE-2021-31009
- CVE-2021-30972
- CVE-2021-30956
- CVE-2021-30992
- CVE-2021-30983
- CVE-2021-30985
- CVE-2021-30991
- CVE-2021-30998
- CVE-2021-30997
- CVE-2021-30967
- CVE-2021-30988
- CVE-2021-30932
- CVE-2021-30948
Frequently Asked Questions
What is CVE-2021-31013?
CVE-2021-31013 is a vulnerability in the FontParser component that allows an out-of-bounds read due to insufficient bounds checking.
Which software versions are affected by CVE-2021-31013?
CVE-2021-31013 affects macOS Monterey 12.1, macOS Big Sur 11.6.2, watchOS 8.3, iOS 15.2, iPadOS 15.2, and tvOS 15.2.
How can this vulnerability be exploited?
By exploiting CVE-2021-31013, an attacker can trigger an out-of-bounds read in the FontParser component, potentially leading to information disclosure or a crash.
What is the severity of CVE-2021-31013?
The severity of CVE-2021-31013 is not specified, but it is important to apply the necessary security updates to mitigate the risk.
How can I fix CVE-2021-31013?
To fix CVE-2021-31013, it is recommended to update to the latest version of the affected software as provided by Apple.