CVE-2021-30954

Description

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

https://www.debian.org/security/2022/dsa-5061

https://www.debian.org/security/2022/dsa-5060

https://support.apple.com/en-us/HT212982

https://support.apple.com/en-us/HT212980

https://support.apple.com/en-us/HT212978

https://support.apple.com/en-us/HT212976

https://support.apple.com/en-us/HT212975

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/

http://www.openwall.com/lists/oss-security/2022/01/21/2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3