CVE-2021-1875

HIGH

Apple Ipados < 14.5 - Double Free

Title source: rule

Description

A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted file may lead to heap corruption.

References (6)

[Vendor Advisory] https://support.apple.com/en-us/HT212317

[Vendor Advisory] https://support.apple.com/en-us/HT212323

[Vendor Advisory] https://support.apple.com/en-us/HT212324

[Vendor Advisory] https://support.apple.com/en-us/HT212325

[Vendor Advisory] https://support.apple.com/en-us/HT212326

[Vendor Advisory] https://support.apple.com/en-us/HT212327

Scores

CVSS v3 7.8

EPSS 0.0025

EPSS Percentile 47.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-415

Status published

Affected Products (46)

apple/ipados < 14.5

apple/iphone_os < 14.5

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

apple/mac_os_x

... and 31 more

Timeline

Published Sep 08, 2021

Tracked Since Feb 18, 2026