VulnerabilityModified
CVE-2021-30685
Parsing a maliciously crafted audio file may lead to disclosure of user information.
MEDIUM 5.5EPSS 0.88%
Does this matter?
Lower severity and a low EPSS score (0.88%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/mac os x · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT212528Vendor Advisory
- https://support.apple.com/en-us/HT212529Vendor Advisory
- https://support.apple.com/en-us/HT212530Vendor Advisory
- https://support.apple.com/en-us/HT212532Vendor Advisory
- https://support.apple.com/en-us/HT212533Vendor Advisory
- https://support.apple.com/en-us/HT212528Vendor Advisory
- https://support.apple.com/en-us/HT212529Vendor Advisory
- https://support.apple.com/en-us/HT212530Vendor Advisory
- https://support.apple.com/en-us/HT212532Vendor Advisory
- https://support.apple.com/en-us/HT212533Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.