CVE-2021-1790

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%

exploitation probability

1.0%top 39% of all CVEs

observed exploitation

nono source reports it

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution.

Affected products

Apple · macOS

References

https://support.apple.com/en-us/HT212147