CVE-2021-1864
CRITICAL | Platform: tvOS | Changelog
CVE Details
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.
CVSS 3.1 Score
| Metric | Value |
|---|---|
| Base Score | 9.8 (CRITICAL) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Weakness
References
- Apple Security Advisory
- NVD Entry
- https://support.apple.com/en-us/HT212317 (Vendor Advisory)
- https://support.apple.com/en-us/HT212323 (Vendor Advisory)
- https://support.apple.com/en-us/HT212324 (Vendor Advisory)