Description
Description: A memory corruption issue in the processing of ICC profiles was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution.
References (7)
Core 7
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212975
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212976
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212978
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212979
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212981
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT212980
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/165559/Apple-ColorSync-Out-Of-Bounds-Read.html
Scores
CVSS v3
7.8
EPSS
0.0152
EPSS Percentile
71.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (7)
apple/ipados
< 15.2
apple/iphone_os
< 15.2
apple/mac_os_x
10.15.7 (9 CPE variants)
apple/mac_os_x
10.15 - 10.15.7
apple/macos
11.0 - 11.6.2
apple/tvos
< 15.2
apple/watchos
< 8.3
Published
Aug 24, 2021
Tracked Since
Feb 18, 2026