CVE-2021-30835: falha em Apple tvOS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.1%
This issue was addressed with improved checks. This issue is fixed in Security Update 2021-005 Catalina, iTunes 12.12 for Windows, tvOS 15, iOS 15 and iPadOS 15, watchOS 8. Processing a maliciously crafted image may lead to arbitrary code execution.
Produtos afetados
Apple · iOS and iPadOSApple · iTunes for WindowsApple · Security Update - CatalinaApple · tvOSApple · watchOSCVEs relacionadas — Apple tvOS
No mesmo produto, das mais perigosas para as menos.
Referências
http://seclists.org/fulldisclosure/2021/Oct/61http://seclists.org/fulldisclosure/2021/Oct/62http://seclists.org/fulldisclosure/2021/Oct/63https://support.apple.com/en-us/HT212805https://support.apple.com/en-us/HT212814https://support.apple.com/en-us/HT212815https://support.apple.com/en-us/HT212817https://support.apple.com/en-us/HT212819https://support.apple.com/kb/HT212804https://support.apple.com/kb/HT212953