CVE-2021-1885

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Apple	iOS and iPadOS	>= unspecified, < 14.5
Apple	tvOS	>= unspecified, < 14.5
Apple	watchOS	>= unspecified, < 7.4
Apple	macOS	>= unspecified, < 11.3

References

https://support.apple.com/en-us/HT212317Vendor Advisory
https://support.apple.com/en-us/HT212323Vendor Advisory
https://support.apple.com/en-us/HT212324Vendor Advisory
https://support.apple.com/en-us/HT212325Vendor Advisory
https://support.apple.com/en-us/HT212317Vendor Advisory
https://support.apple.com/en-us/HT212323Vendor Advisory
https://support.apple.com/en-us/HT212324Vendor Advisory
https://support.apple.com/en-us/HT212325Vendor Advisory

Timeline

Published: Sep 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-18867.8Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Comp CVE-2021-18877.5An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure CVE-2021-18887.8Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, CVE-2021-18897.8Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,CVE-2021-18907.8Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, S CVE-2021-18917.8A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Comput CVE-2021-18927.8Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connec CVE-2021-18947.8Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, S CVE-2021-18957.8Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdr CVE-2021-18964.3Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connec CVE-2021-18974.6Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Indu CVE-2021-18984.6Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, S