CVE-2021-30663
HIGH KEViOS <14.5.1 - RCE
Title source: llmDescription
An integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1. Processing maliciously crafted web content may lead to arbitrary code execution.
References (6)
Scores
CVSS v3
8.8
EPSS
0.0068
EPSS Percentile
71.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2021-11-03
VulnCheck KEV
2021-05-03
InTheWild.io
2021-05-03
ENISA EUVD
EUVD-2021-17580
CWE
CWE-190
Status
published
Products (5)
apple/ipados
14.0 - 14.5.1
apple/iphone_os
< 12.5.3
apple/macos
11.0 - 11.3.1
apple/safari
< 14.1.1
apple/tvos
< 14.6
Published
Sep 08, 2021
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026