VDB

CVE-2021-30846

CVE-2021-30846 PUBLISHED

Reported by apple · Published October 19, 2021

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing maliciously crafted web content may lead to arbitrary code execution.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
webkitgtk4-develAmazon Linux2.38.5-3.amzn2.0.1
webkit2gtkAlpine2.34.0-r0
webkitgtk4-jsc-develAmazon Linux2.38.5-3.amzn2.0.1
wpewebkitArch Linux2.34.1-1
webkitgtk4-jscAmazon Linux2.38.5-3.amzn2.0.1
webkitgtk4Amazon Linux2.38.5-3.amzn2.0.1
SafariApple15.0, 15
macosapple12.0.1
iphone_osapple14.8
webkit2gtkUbuntu:22.04:LTS2.34.0-1ubuntu1
iOS and iPadOSApple15, 14.8
watchosapple8.0, 8

3 more packages have a fixed version. See every fix in Lookup.

Affected products

VendorProductVersions
AppleiOS and iPadOSunspecified
AppleiOS and iPadOSunspecified
AppletvOSunspecified
AppleSafariunspecified
ApplewatchOSunspecified
AppleSafari*
amazon:2webkitgtk4-devel0
AppleiOS and iPadOS*, *
alpinewebkit2gtk0
ApplewatchOS*
amazon:2webkitgtk4-jsc-devel0
archwpewebkit0
amazon:2webkitgtk4-jsc0
AppletvOS*
amazon:2webkitgtk40

Timeline

  • Sep 20, 2021 CVE Published
  • Oct 20, 2021 EPSS Score (30 in total, the first dated here)
  • Mar 7, 2026 Distribution Patch (4 in total, the first dated here)
  • Mar 7, 2026 Security Advisory (12 in total, the first dated here)
  • Aug 3, 2026 Coalition ESS Score
  • Oct 11, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-30846
vulnetix vdb fixes CVE-2021-30846

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-30846/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›