CVE-2021-1858
Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - product-security@apple.com
- Published
- 2021-09-08
- Last modified
- 2024-08-03
- Weaknesses
- CWE-787
Affected products
- Ios And Ipados (Apple)
- Ipados (Apple)
- Iphone Os (Apple)
- Mac Os X (Apple)
- Macos (Apple)
- Tvos (Apple)
- Watchos (Apple)
References
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
