Published: 08/09/2021 Updated: 09/01/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 606

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, iOS 12.5.4, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted certificate may lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple mac os x 10.14.6
apple mac os x 10.15.7
apple mac os x 10.15.6
apple watchos
apple tvos
apple iphone os
apple ipados
apple mac os x
apple macos

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2021-05-25-7 tvOS 146   From: Apple Product Security vi ...

Useful resources for iOS hacking

iOS Hacking Resources Basics Official references: ARMv8 Instruction Set Overview (short, kinda outdated at this point) ARMv8 Architecture Reference Manual (long) ARM A-Profile Exploration tools (same as above, but in machine readable form) ARM System Architecture Software Standards (ABIs, extensions, etc) Clang Pointer Authentication ABI My own doing: arm64 assembly crash c

iOS Security Awesome В данном репозитории собранны материалы по безопасности iOS-приложений, различные статьи, исследования, инструменты анализа и полезные библиотеки/инструменты для обеспечения безопасности прилож

Android Security Awesome В данном репозитории собранны материалы по безопасности Android-приложений, различные статьи, исследования, инструменты анализа и полезные библиотеки/инструменты для обеспечения безопасности п�

CWE-787 https://support.apple.com/en-us/HT212530 https://support.apple.com/en-us/HT212531 https://support.apple.com/en-us/HT212529 https://support.apple.com/en-us/HT212528 https://support.apple.com/en-us/HT212548 https://support.apple.com/en-us/HT212532 https://support.apple.com/en-us/HT212533 https://nvd.nist.gov https://github.com/Siguza/ios-resources http://seclists.org/fulldisclosure/2021/May/69

CVE-2021-30737

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect