Description
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | macOS | >= unspecified, < 11.3 |
| Apple | macOS | >= unspecified, < 14.5 |
| Apple | macOS | >= unspecified, < 12.5 |
| Apple | macOS | >= unspecified, < 14.6 |
| Apple | macOS | >= unspecified, < 14.1 |
References
- https://support.apple.com/en-us/HT212335Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212336Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212341Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212532Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212534Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212335Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212336Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212341Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212532Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT212534Release Notes, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30663Third Party Advisory, US Government Resource
Timeline
- Published
- Sep 8, 2021
- Last modified
- Jun 17, 2026
- Added to CISA KEV
- Nov 3, 2021
- NVD status
- Analyzed