CVE-2021-30983

HIGH KEV

iPadOS < 15.2 - Remote Code Execution via Buffer Overflow

Title source: llm

Exploitation Summary

CVE-2021-30983 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 27, 2022.

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT212976

US Government Resource

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30983

Scores

CVSS v3 7.8

EPSS 0.0050

EPSS Percentile 66.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation active

Automatable no

Technical Impact total

Details

CISA KEV 2022-06-27

VulnCheck KEV 2021-12-13

InTheWild.io 2021-12-13

ENISA EUVD EUVD-2021-17900

CWE

CWE-120

Status published

Products (2)

apple/ipados < 15.2

apple/iphone_os < 15.2

Published Aug 24, 2021

KEV Added Jun 27, 2022

Tracked Since Feb 18, 2026