CVE-2021-30983: high-severity vulnerability in Apple iOS and iPadOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply updates per vendor instructions.
A buffer overflow vulnerability in iOS and iPadOS allowed apps to write data beyond memory boundaries, potentially enabling them to run malicious code with system-level permissions. This was a critical flaw that could compromise device security and user data.
A stack-based or heap-based buffer overflow in iOS/iPadOS kernel-space code allowed local applications to write beyond allocated memory boundaries (CWE-120). Exploitation required a malicious app with code execution capability; successful exploitation could result in arbitrary code execution with kernel privileges, bypassing security controls.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.