7.8
CVSSv3

CVE-2021-30807

Published: 19/10/2021 Updated: 08/08/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 830
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple watchos

apple iphone os

apple ipad os

apple macos

Github Repositories

Exploit for CVE-2021-30807

Write up is here: jsherman212githubio/2021/11/28/popping_ios14_with_iomfbhtml Exploit for CVE-2021-30807 If you really want to build a jailbreak out of it, it will require tuning for your device and iOS version because I have no info leak to use for this To tune for A11 and below, use pongo to load xnuspy and build with SAMPLING_MEMORY=1 make -B This will enable a

IOMobileFrameBuffer_LPE_POC A short blogpost about CVE-2021-30807, patched in iOS 1471 Blogpost is here

An iOS exploitation project for whatever versions I feel like bothering with.

urt1ca A semi-untethered jailbreak for iOS 90-1511 Important Info This jailbreak is HIGHLY experimental! Exploits may be dropped or added during the development process Explanations of statuses on features/exploits may be found below Status Meaning ? In research X Implementation not started * Implementation in progress ! Implemented but not tested $ Imp

Gex is an iOS 14.7 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s)

Gex is an iOS 147 jailbreak using CVE-2021-30807 IOMFB & CVE-2021-30860 exploit(s) If you want to jailbreak 146, 147, 1471, and 148 and you have an A12/A13 device use unc0ver v800 (for 1481 and the other bionic chips wait for this )

Awesome Stars A curated list of my GitHub stars! Generated by starred Contents Assembly C C# C++ CSS Dockerfile Go HTML Java JavaScript Jinja LOLCODE Logos Makefile Objective-C Objective-C++ Others Pascal Pawn Perl PowerShell Python Rust Shell Svelte Swift TypeScript Vue Assembly mass1ve-err0r/unibi-OSS - A Collection of full & partial code for CompSci / IT stude

Recent Articles

Apple patches zero-day vulnerability in iOS, iPadOS, macOS under active attack
The Register • Thomas Claburn in San Francisco • 27 Jul 2021

Get our weekly newsletter Characteristically mum about details

Apple on Monday patched a zero-day vulnerability in its iOS, iPadOS, and macOS operating systems, only a week after issuing a set of OS updates addressing about three dozen other flaws. The bug, CVE-2021-30807, was found in the iGiant's IOMobileFrameBuffer code, a kernel extension for managing the screen frame buffer that could be abused to run malicious code on the affected device. CVE-2021-30807, credited to an anonymous researcher, has been addressed by undisclosed but purportedly improved me...