Skip to content
OpenAdvisories
Unscored CVE-2021-1858 EUVD-2021-7322GHSA-973q-jf8v-6q77

Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS …

Published Sep 8, 2021 · Updated Aug 3, 2024 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: tvOS Product: watchOS Platform: iOS Platform: macOS

Description

Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 14.5 14.5
Apple tvOS unspecified – < 14.5 14.5
Apple watchOS unspecified – < 7.4 7.4
Apple macOS unspecified – < 11.3, unspecified – < 2021 11.3

References