VULNERABILITY INTELLIGENCE
CVE-2021-30860
CVSS score7.8 HIGH
EPSS probability75.99%
CISA KEVKnown exploited vulnerability
Published2021-08-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Apple Multiple Products Integer Overflow Vulnerability
Vendor / product: Apple / Multiple Products
Description
An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Weakness classification
- nvd@nist.gov: CWE-190
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-190
Primary references
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List, Third Party Advisory
- product-security@apple.com — Mailing List
- product-security@apple.com — Third Party Advisory
- product-security@apple.com — Vendor Advisory
- product-security@apple.com — Vendor Advisory