7.8

CVE-2021-30693

A validation issue was addressed with improved logic. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to arbitrary code execution.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 14.6
Apple ≫ iPhone OS Version < 14.6
Apple ≫ macOS X Version >= 10.14 <= 10.14.5
Apple ≫ macOS X Version >= 10.15 <= 10.15.6
Apple ≫ macOS X Version10.14.6 Update-
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-001
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-002
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-004
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-005
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-006
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-007
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-001
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-002
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-003
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-004
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-005
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-006
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2020-007
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2021-001
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2021-002
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2021-003
Apple ≫ macOS X Version10.14.6 Updatesupplemental_update
Apple ≫ macOS X Version10.14.6 Updatesupplemental_update_2
Apple ≫ macOS X Version10.15.7 Update-
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2020
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2020-001
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2020-005
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2020-007
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2021-001
Apple ≫ macOS X Version10.15.7 Updatesecurity_update_2021-002
Apple ≫ macOS X Version10.15.7 Updatesupplemental_update
Apple ≫ macOS Version >= 11.0 < 11.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.4% 0.578
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.apple.com/en-us/HT212528
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT212529
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT212530
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT212531
Vendor Advisory
Release Notes