A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead to disclosure of user information.

According to its banner, the version of Apple TV on the remote device is prior to 19K53. It is therefore affected by multiple vulnerabilities as described in the HT212980

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6.3 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following:

  - A memory corruption issue in IOMobileFrameBuffer that can lead to arbitrary code execution with kernel     privileges due to improper input validation. (CVE-2022-22587)

  - A buffer overflow issue in the kernel that can lead to arbitrary code execution with kernel privileges     due to improper memory handling. (CVE-2022-22593)

  - An information disclosure issue in Model I/O that can lead to unexpected application termination or     arbitrary code execution due to improper state management. (CVE-2022-22579)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.1. It is, therefore, affected by multiple vulnerabilities:

  - An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey     12.1. A device may be passively tracked via BSSIDs. (CVE-2021-30987)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1,     Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper     checks. (CVE-2021-30950, CVE-2021-30976)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Parsing a maliciously crafted audio file may lead     to disclosure of user information. (CVE-2021-30960)

  - A device configuration issue was addressed with an updated configuration. This issue is fixed in macOS     Monterey 12.1. A device may be passively tracked by its Bluetooth MAC address. (CVE-2021-30986)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1,     watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. User traffic might unexpectedly be leaked to a proxy     server despite PAC configurations. (CVE-2021-30966)

  - Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input     validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2.
    Processing a maliciously crafted image may lead to arbitrary code execution. (CVE-2021-30926)

  - Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input     validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update     2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead     to arbitrary code execution. (CVE-2021-30942)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted audio file may     lead to arbitrary code execution. (CVE-2021-30957)

  - An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur     11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2,     watchOS 8.3. Playing a malicious audio file may lead to arbitrary code execution. (CVE-2021-30958)

  - A logic issue was addressed with improved validation. This issue is fixed in Security Update 2021-008     Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary code with kernel     privileges. (CVE-2021-30935)

  - This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2,     macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local     attacker may be able to elevate their privileges. (CVE-2021-30945)

  - Description: A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.1     and iPadOS 15.1, tvOS 15.1, macOS Big Sur 11.6.2, watchOS 8.1, macOS Monterey 12.1. A malicious     application may be able to bypass Privacy preferences. (CVE-2021-31007)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey     12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. Processing a maliciously crafted font may result in     the disclosure of process memory. (CVE-2021-31013)

  - A permissions issue was addressed with improved validation. This issue is fixed in iOS 15.2 and iPadOS     15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious application may be able to read sensitive     contact information. (CVE-2021-31000)

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1,     Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to execute     arbitrary code with kernel privileges. (CVE-2021-30977)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur     11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2,     watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution. (CVE-2021-30939)

  - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.1,     Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. An application may be able to execute arbitrary     code with kernel privileges. (CVE-2021-30981)

  - A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1,     iOS 15.2 and iPadOS 15.2. A malicious application may be able to execute arbitrary code with kernel     privileges. (CVE-2021-30996)

  - A race condition was addressed with improved locking. This issue is fixed in macOS Monterey 12.1, Security     Update 2021-008 Catalina, macOS Big Sur 11.6.2. A remote attacker may be able to cause unexpected     application termination or heap corruption. (CVE-2021-30982)

  - A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big     Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2,     watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
    (CVE-2021-30937)

  - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur     11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2,     watchOS 8.3. An application may be able to execute arbitrary code with kernel privileges. (CVE-2021-30927,     CVE-2021-30980)

  - A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big     Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2,     watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
    (CVE-2021-30949)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. An attacker in a privileged network position may     be able to execute arbitrary code. (CVE-2021-30993)

  - A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.1,     watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. A malicious application may be able to execute arbitrary     code with kernel privileges. (CVE-2021-30955)

  - A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.1, Security     Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may bypass Gatekeeper checks.
    (CVE-2021-30990)

  - An issue in the handling of group membership was resolved with improved logic. This issue is fixed in iOS     15.2 and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1. A malicious user may be able to leave a messages     group but continue to receive messages in that group. (CVE-2021-30943)

  - Multiple issues were addressed by removing HDF5. This issue is fixed in iOS 15.2 and iPadOS 15.2, macOS     Monterey 12.1. Multiple issues in HDF5. (CVE-2021-31009)

  - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS     Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina.
    Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code     execution. (CVE-2021-30971)

  - An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Monterey     12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a     maliciously crafted file may disclose user information. (CVE-2021-30973)

  - An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS     Monterey 12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina.
    Processing a maliciously crafted USD file may disclose memory contents. (CVE-2021-30929)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a     maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.
    (CVE-2021-30979)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey     12.1, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2, Security Update 2021-008 Catalina. Processing a     maliciously crafted USD file may disclose memory contents. (CVE-2021-30940, CVE-2021-30941)

  - A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2,     tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3.
    A malicious application may be able to elevate privileges. (CVE-2021-30995)

  - A validation issue related to hard link behavior was addressed with improved sandbox restrictions. This     issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina,     iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to bypass certain Privacy     preferences. (CVE-2021-30968)

  - A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.1,     watchOS 8.3, iOS 15.2 and iPadOS 15.2, macOS Big Sur 11.6.2. A malicious application may be able to bypass     certain Privacy preferences. (CVE-2021-30946)

  - An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Big Sur     11.6.2, tvOS 15.2, macOS Monterey 12.1, iOS 15.2 and iPadOS 15.2, watchOS 8.3. An application may be able     to access a user's files. (CVE-2021-30947)

  - This issue was addressed by disabling execution of JavaScript when viewing a scripting dictionary. This     issue is fixed in macOS Monterey 12.1, Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A     malicious OSAX scripting addition may bypass Gatekeeper checks and circumvent sandbox restrictions.
    (CVE-2021-30975)

  - Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.2     and iPadOS 15.2, watchOS 8.3, macOS Monterey 12.1, tvOS 15.2. A malicious app may be able to access data     from other apps by enabling additional logging. (CVE-2021-30944)

  - This issue was addressed with improved checks. This issue is fixed in Security Update 2022-001 Catalina,     macOS Big Sur 11.6.3. A malicious application may be able to bypass certain Privacy preferences.
    (CVE-2021-30972)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.2,     macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A local     user may be able to modify protected parts of the file system. (CVE-2021-30767)

  - An inherited permissions issue was addressed with additional restrictions. This issue is fixed in macOS     Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2. A malicious application may be able to bypass     Privacy preferences. (CVE-2021-30964)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1,     macOS Big Sur 11.6.2. A malicious application may be able to bypass Privacy preferences. (CVE-2021-30970)

  - A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.1,     Security Update 2021-008 Catalina, macOS Big Sur 11.6.2. A malicious application may be able to cause a     denial of service to Endpoint Security clients. (CVE-2021-30965)

  - A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2,     macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2021-30934)

  - A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.2,     macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2021-30936, CVE-2021-30951)

  - An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS     Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2021-30952)

  - A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.2, macOS     Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2021-30984)

  - An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in tvOS 15.2, macOS     Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web     content may lead to arbitrary code execution. (CVE-2021-30953)

  - A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2,     macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted     web content may lead to arbitrary code execution. (CVE-2021-30954)

  - This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.1, Security Update     2021-008 Catalina, macOS Big Sur 11.6.2. A local user may be able to cause unexpected system termination     or read kernel memory. (CVE-2021-30938)

Note that Nessus has not tested for these issues but has instead relied only on the operating system's self-reported version number.

The version of Apple iOS running on the mobile device is prior to 15.2. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Severity
200519	Apple TV < 19K53 Multiple Vulnerabilities (HT212980)	Nessus	Misc.	high
157242	macOS 11.x < 11.6.3 Multiple Vulnerabilities (HT213055)	Nessus	MacOS X Local Security Checks	critical
156230	macOS 12.x < 12.1 Multiple Vulnerabilities (HT212978)	Nessus	MacOS X Local Security Checks	critical
156187	Apple iOS < 15.2 Multiple Vulnerabilities (HT212976)	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2021-30960

medium

Tenable Plugins

high

critical

critical

critical