Skip to content
OpenAdvisories
Unscored CVE-2021-1740 EUVD-2021-7204GHSA-9hc5-m4g5-3m3c

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021…

Published Sep 8, 2021 · Updated Aug 3, 2024 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: tvOS Product: watchOS Platform: iOS Platform: macOS

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local user may be able to modify protected parts of the file system.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 14.5 14.5
Apple tvOS unspecified – < 14.5 14.5
Apple watchOS unspecified – < 7.4 7.4
Apple macOS unspecified – < 11.3, unspecified – < 2021 11.3

References