CyberSec.Space Logo
Back to CVE Browser

CVE-2021-30858

Known Exploited (CISA KEV)HIGH
8.8
CVSS Severity Score
EPSS Score25.4860%
EPSS Percentile87.99th
PublishedAug 24, 2021
Last ModifiedOct 27, 2025

Vulnerability Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Affected Platforms (CPE)

💻
Apple

Ipados

>= 13.1 and < 14.8
💻
Apple

Iphone Os

< 12.5.5
💻
Apple

Iphone Os

>= 13.0 and < 14.8
💻
Apple

Macos

< 11.6
💻
Fedoraproject

Fedora

= 33
💻
Fedoraproject

Fedora

= 34
💻
Debian

Debian Linux

= 10.0
💻
Debian

Debian Linux

= 11.0

References & Advisories

🔗 http://seclists.org/fulldisclosure/2021/Sep/25
🔗 http://seclists.org/fulldisclosure/2021/Sep/27
🔗 http://seclists.org/fulldisclosure/2021/Sep/29
🔗 http://seclists.org/fulldisclosure/2021/Sep/38
🔗 http://seclists.org/fulldisclosure/2021/Sep/39
🔗 http://seclists.org/fulldisclosure/2021/Sep/50
🔗 http://www.openwall.com/lists/oss-security/2021/09/20/1
🔗 http://www.openwall.com/lists/oss-security/2021/10/26/9

Related Vulnerabilities

CVE-2019-877910.0

A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions...

CVE-2020-39109.8

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39099.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....

CVE-2020-39119.8

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10....