CVE-2021-30900: high-severity vulnerability in Apple iOS and iPadOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A flaw in iOS and iPadOS allows a malicious app to write data outside the intended memory area, potentially letting it run harmful code with the highest system permissions. This is serious because it gives attackers complete control over your device.
An out-of-bounds write vulnerability in iOS/iPadOS memory handling allows a local malicious application to write beyond allocated buffer boundaries. The attack requires a malicious app to be installed; successful exploitation grants kernel-level code execution, enabling complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.