CVE-2021-1881 — Vulnetix

CVE-2021-1881 PUBLISHED CVSS 7.800000190734863 HIGH

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.

EPSS 0.50% · 66.3th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.50%

66.3th percentile

Affected Products

Vendor	Product	Versions
apple	watchos	0
apple	iphone_os	0
apple	macos	11.0
Apple	tvOS	unspecified
apple	mac_os_x	10.14.6, 10.15.7, 10.15.7
Apple	iOS and iPadOS	unspecified
Apple	macOS	unspecified, unspecified, unspecified
Apple	watchOS	unspecified
apple	ipados	0
apple	tvos	0

Timeline

Apr 27, 2021 CVE Published
Sep 9, 2021 EPSS Score
Sep 18, 2021 EPSS Score
Oct 9, 2021 EPSS Score
Jan 2, 2022 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 1, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jun 24, 2022 EPSS Score
Aug 22, 2022 EPSS Score
Oct 18, 2022 EPSS Score

References

https://support.apple.com/fr-fr/HT212325 advisory
https://support.apple.com/fr-fr/HT212327 advisory
https://support.apple.com/fr-fr/HT212317 advisory
https://support.apple.com/fr-fr/HT212318 advisory
https://support.apple.com/fr-fr/HT212324 advisory
https://support.apple.com/fr-fr/HT212326 advisory
https://support.apple.com/fr-fr/HT212319 advisory
https://support.apple.com/fr-fr/HT212323 advisory
https://support.apple.com/fr-fr/HT212320 advisory
https://support.apple.com/fr-fr/HT212321 advisory
https://support.apple.com/en-us/HT212317 url
https://support.apple.com/en-us/HT212323 url
https://support.apple.com/en-us/HT212324 url
https://support.apple.com/en-us/HT212325 url
https://support.apple.com/en-us/HT212326 url
https://support.apple.com/en-us/HT212327 url
https://nvd.nist.gov/vuln/detail/CVE-2021-1881 advisory

Open in Interactive Console →