VulnerabilityModified
CVE-2021-30700
Processing a maliciously crafted image may lead to disclosure of user information.
MEDIUM 5.5EPSS 0.88%
Does this matter?
Lower severity and a low EPSS score (0.88%). Track it; it rarely justifies an emergency change on its own.
Description
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4, tvOS 14.6, watchOS 7.5, iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted image may lead to disclosure of user information.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.88% probability · 57th percentile
- CISA KEV
- Not listed
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT212528Vendor Advisory
- https://support.apple.com/en-us/HT212529Vendor Advisory
- https://support.apple.com/en-us/HT212532Vendor Advisory
- https://support.apple.com/en-us/HT212533Vendor Advisory
- https://support.apple.com/en-us/HT212528Vendor Advisory
- https://support.apple.com/en-us/HT212529Vendor Advisory
- https://support.apple.com/en-us/HT212532Vendor Advisory
- https://support.apple.com/en-us/HT212533Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.