Description
Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Monterey 12.1, watchOS 8.3, iOS 15.2 and iPadOS 15.2, tvOS 15.2. Processing a maliciously crafted image may lead to arbitrary code execution.
References (7)
Core 7
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT212871
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT212872
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT212868
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212975
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212976
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212978
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212980
Scores
CVSS v3
7.8
EPSS
0.0132
EPSS Percentile
67.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (7)
apple/ipados
< 14.8.1
apple/iphone_os
< 14.8.1
apple/mac_os_x
10.15.7 (10 CPE variants)
apple/mac_os_x
10.15 - 10.15.17
apple/macos
< 12.1
apple/tvos
< 15.2
apple/watchos
< 8.3
Published
Aug 24, 2021
Tracked Since
Feb 18, 2026