CVE-2021-30779

Опубликовано: 08 сент. 2021

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

This issue was addressed with improved checks. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7. Processing a maliciously crafted image may lead to arbitrary code execution.

Ссылки

https://support.apple.com/en-us/HT212601
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212602
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212604
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212605
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212601
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212602
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212604
Release Notes
Vendor Advisory
https://support.apple.com/en-us/HT212605
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 14.7 (исключая)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

Версия до 11.5 (исключая)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Версия до 14.7 (исключая)

cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

Версия до 7.6 (исключая)

EPSS

Процентиль: 75%

0.00898

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-9x54-gxfh-qxvm

github

больше 3 лет назад