CVE-2021-1885 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-1885 PUBLISHED CVSS 7.800000190734863 HIGH

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.

EPSS 0.46% · 64.0th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.46%

64.0th percentile

Affected Products

Vendor	Product	Versions
apple	tvos	0
apple	iphone_os	0
Apple	watchOS	unspecified
Apple	macOS	unspecified
apple	macos	11.0
apple	watchos	0
Apple	tvOS	unspecified
Apple	iOS and iPadOS	unspecified
apple	ipados	0

Timeline

Apr 27, 2021 CVE Published
Sep 9, 2021 EPSS Score
Sep 18, 2021 EPSS Score
Oct 9, 2021 EPSS Score
Jan 1, 2022 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 27, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jun 22, 2022 EPSS Score
Aug 19, 2022 EPSS Score
Oct 15, 2022 EPSS Score

References

https://support.apple.com/fr-fr/HT212325 advisory
https://support.apple.com/fr-fr/HT212327 advisory
https://support.apple.com/fr-fr/HT212317 advisory
https://support.apple.com/fr-fr/HT212318 advisory
https://support.apple.com/fr-fr/HT212324 advisory
https://support.apple.com/fr-fr/HT212326 advisory
https://support.apple.com/fr-fr/HT212319 advisory
https://support.apple.com/fr-fr/HT212323 advisory
https://support.apple.com/fr-fr/HT212320 advisory
https://support.apple.com/fr-fr/HT212321 advisory
https://support.apple.com/en-us/HT212317 url
https://support.apple.com/en-us/HT212323 url
https://support.apple.com/en-us/HT212324 url
https://support.apple.com/en-us/HT212325 url
https://nvd.nist.gov/vuln/detail/CVE-2021-1885 advisory

Open in Interactive Console →