CVE-2021-30977

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute arbitrary code with kernel privileges.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
ApplemacOS>= unspecified, < 12.1
ApplemacOS>= unspecified, < 11.6
ApplemacOS>= unspecified, < 2021

References

Timeline

Published
Aug 24, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-309797.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, mCVE-2021-309807.8A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS MontereyCVE-2021-309817.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 CatalinaCVE-2021-309825.9A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS BCVE-2021-309837.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be CVE-2021-309847.5A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 anCVE-2021-309857.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious appliCVE-2021-309865.5A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS Monterey 12.1. A device may be passivCVE-2021-309875.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.1. A device may be passively trackCVE-2021-309885.5Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious applicCVE-2021-309905.5A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS BCVE-2021-309917.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.2 and iPadOS 15.2. A malicious application
CVE-2021-30977: High severity, CVSS 7.8 | Vulnix