Ipad Os
CVE-2021-30902
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code execution.
AnalysisAI
A use after free issue was addressed with improved memory management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code execution. Affected products include: Apple Ipad Os, Apple Ipados, Apple Iphone Os.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.
A logic issue was addressed with improved state management. Rated critical severity (CVSS 9.8), this vulnerability is re
An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
An out-of-bounds write was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabil
An out-of-bounds read was addressed with improved input validation. Rated critical severity (CVSS 9.8), this vulnerabili
The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
A logic issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remote
A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
A use after free issue was addressed with improved memory management. Rated high severity (CVSS 8.8), this vulnerability
A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerabili
A type confusion issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability i
A memory corruption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabilit
A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerabili
Same weakness CWE-416 – Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today