CVE-2021-30836

Related Vulnerabilities: CVE-2021-30836  

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

Description

The MITRE CVE dictionary describes this issue as:

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.

Additional Information

  • Bugzilla 2034376: CVE-2021-30836 webkitgtk: processing a maliciously crafted audio file may disclose restricted memory
  • CWE-125: Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2021-30836