CVE-2021-30755

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Processing a maliciously crafted font may result in the disclosure of process memory. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5. An out-of-bounds read was addressed with improved input validation.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 11.4
Apple	macOS	>= unspecified, < 14.6
Apple	macOS	>= unspecified, < 7.5

References

https://support.apple.com/en-us/HT212529Vendor Advisory
https://support.apple.com/en-us/HT212532Vendor Advisory
https://support.apple.com/en-us/HT212533Vendor Advisory
https://support.apple.com/en-us/HT212529Vendor Advisory
https://support.apple.com/en-us/HT212532Vendor Advisory
https://support.apple.com/en-us/HT212533Vendor Advisory

Timeline

Published: Sep 8, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-307565.5A local attacker may be able to view Now Playing information from the lock screen. This issue is fixed in macOS Big Sur 11.4, iOS 14.6 and i CVE-2021-307575.5This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to CVE-2021-307588.8A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.7, Safari 14.1.2, macOS Big Sur 11.5, watch CVE-2021-307597.8A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, CVE-2021-307607.8An integer overflow was addressed through improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS CVE-2021-307618.8A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted we CVE-2021-307628.8A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.5.4. Processing maliciously crafted web CVE-2021-307635.5An input validation issue was addressed with improved input validation. This issue is fixed in iOS 14.7, watchOS 7.6. A shortcut may be able CVE-2021-307647.8Processing a maliciously crafted file may lead to arbitrary code execution. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tv CVE-2021-307657.8An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Cat CVE-2021-307667.8An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.5, Security Update 2021-004 Cat CVE-2021-307675.5A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2, macOS Monterey 12.1, Security Updat