CVE-2021-30770
MEDIUM | Platform: tvOS | Changelog
CVE Details
Description
A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.
CVSS 3.1 Score
| Metric | Value |
|---|---|
| Base Score | 5.5 (MEDIUM) |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N |
Weakness
References
- Apple Security Advisory
- NVD Entry
- https://support.apple.com/en-us/HT212601 (Release Notes, Vendor Advisory)
- https://support.apple.com/en-us/HT212604 (Release Notes, Vendor Advisory)
- https://support.apple.com/en-us/HT212605 (Release Notes, Vendor Advisory)