CVE-2021-1791

Published: 02/04/2021 Updated: 09/04/2021

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:C/I:N/A:N

This vulnerability allows local malicious users to disclose sensitive information on affected installations of Apple iOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the FairplayIOKit kext. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x
apple mac os x 10.14.6
apple mac os x 10.15.7
apple ipados
apple iphone os
apple tvos
apple watchos
apple macos

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2021-02-01-1 macOS Big Sur 112, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave macOS Big Sur 112, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave addresses the following issues Information about the security content is also available at supp ...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2021-02-01-2 Additional information for APPLE-SA-2021-01-26-1 iOS 144 and iPadOS 144 iOS 144 and iPadOS 144 addresses the following issues Information about the security content is also available at supportapplecom/HT212146 Analytics Available for: iPhone 6s and later, iPad ...

Some RE work on Apple's Fairplay DRM

Poor Man's Kernel Debuger This project loads FairplayIOKit kernel driver into userspace and make it possible for LLDB to debug How to Compile In project folder mkdir build && cd build cmake make Procedure FairplayIOKit send mig request to fairplayd at uf_setup_from_fp fairplayd talks to FairplayIOKit method ucRunve

CWE-125 https://support.apple.com/en-us/HT212146 https://support.apple.com/en-us/HT212149 https://support.apple.com/en-us/HT212147 https://support.apple.com/en-us/HT212148 https://nvd.nist.gov https://github.com/pwn0rz/fairplay_research http://seclists.org/fulldisclosure/2021/Feb/14 https://www.zerodayinitiative.com/advisories/ZDI-21-251/

CVE-2021-1791

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect