Description
A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212317
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212323
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212324
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212325
Scores
CVSS v3
6.5
EPSS
0.0129
EPSS Percentile
66.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-665
Status
published
Products (5)
apple/ipados
< 14.5
apple/iphone_os
< 14.5
apple/macos
11.0 - 11.3
apple/tvos
< 14.5
apple/watchos
< 7.4
Published
Sep 08, 2021
Tracked Since
Feb 18, 2026