CVE-2021-30814

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted image may lead to arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
AppleiOS and iPadOS>= unspecified, < 15
AppletvOS>= unspecified, < 15
ApplewatchOS>= unspecified, < 8

References

Timeline

Published
Oct 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-308152.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fiCVE-2021-308162.4The issue was addressed with improved permissions logic. This issue is fixed in iOS 15 and iPadOS 15. An attacker with physical access to a CVE-2021-308175.5A permissions issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.5. A malicious application may be able tCVE-2021-308188.8A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, iOS 15 and iPadCVE-2021-308195.5An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 15 and iPadOS 15. Processing a maliciously crCVE-2021-308209.8A logic issue was addressed with improved state management. This issue is fixed in iOS 14.8 and iPadOS 14.8. A remote attacker may be able tCVE-2021-308217.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-00CVE-2021-308236.5A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.0.1, iOS 14.8 and iPadOS 14.8, tvOS 15, SafCVE-2021-308247.8A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-0CVE-2021-308257.8This issue was addressed with improved checks. This issue is fixed in iOS 15 and iPadOS 15. A local attacker may be able to cause unexpectedCVE-2021-308267.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15 and iPadOS 15. In certain situations, the basebandCVE-2021-308277.8A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Security Update 2021-005 C
CVE-2021-30814: High severity, CVSS 7.8 | Vulnix