CVE-2021-30791
Status: ModifiedMedium (5.5)—
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file may disclose user information.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Base score: 5.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 1.12%
- Percentile among all scored CVEs: 65
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (4)
CWEs
- CWE-125
References
- https://support.apple.com/en-us/HT212601
- https://support.apple.com/en-us/HT212602
- https://support.apple.com/kb/HT212600
- https://support.apple.com/kb/HT212603
- https://support.apple.com/en-us/HT212601
- https://support.apple.com/en-us/HT212602
- https://support.apple.com/kb/HT212600
- https://support.apple.com/kb/HT212603
Raw JSON (NVD)
Show
{
"id": "CVE-2021-30791",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "product-security@apple.com",
"affectedData": [
{
"vendor": "Apple",
"product": "iOS",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "14.7",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "11.5",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-09-08T14:15:11.487",
"references": [
{
"url": "https://support.apple.com/en-us/HT212601",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/en-us/HT212602",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT212600",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/kb/HT212603",
"tags": [
"Vendor Advisory"
],
"source": "product-security@apple.com"
},
{
"url": "https://support.apple.com/en-us/HT212601",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.apple.com/en-us/HT212602",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.apple.com/kb/HT212600",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://support.apple.com/kb/HT212603",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.7, macOS Big Sur 11.5. Processing a maliciously crafted file may disclose user information."
},
{
"lang": "es",
"value": "Se abordó una lectura fuera de límites con una comprobación de límites mejorada. Este problema se corrigió en iOS versión 14.7, macOS Big Sur versión 11.5. El procesamiento de un archivo diseñado maliciosamente puede divulgar información del usuario"
}
],
"lastModified": "2026-06-17T03:50:54.280",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B5771AF-0A7B-4CB9-85C1-AE624498D080",
"versionEndExcluding": "14.7"
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3AF02B7-BF1F-483A-BA47-9B5B92AF1D29",
"versionEndExcluding": "14.7"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E76BECE-0843-4B9F-90DE-7690764701B0",
"versionEndExcluding": "10.14.6",
"versionStartIncluding": "10.14.0"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB8A73F8-3074-4B32-B9F6-343B6B1988C5",
"versionEndExcluding": "10.15.7",
"versionStartIncluding": "10.15"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26108BEF-0847-4AB0-BD98-35344DFA7835"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "510F8317-94DA-498E-927A-83D5F41AF54A"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D5D1970-6D2A-42CA-A203-42023D71730D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63940A55-D851-46EB-9668-D82BEFC1FE95"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68C7A97A-3801-44FA-96CA-10298FA39883"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D69914D-46C7-4A0E-A075-C863C1692D33"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4A6BF78-B772-435C-AC1A-2199027CCF9E"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A233DE4-D09A-4157-B852-E675889DD4C1"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-004:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5B08C18-E0B5-4036-824E-4A3FCB518200"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C88BD98-46F5-447F-963A-FB9B167E31BE"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F12CC8B5-C1EB-419E-8496-B9A3864656AD"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FD7176C-F4D1-43A7-9E49-BA92CA0D9980"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2703DE0B-8A9E-4A9D-9AE8-028E22BF47CA"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F441A43-1669-478D-9EC8-E96882DE4F9F"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D425C653-37A2-448C-BF2F-B684ADB08A26"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A54D63B7-B92B-47C3-B1C5-9892E5873A98"
},
{
"criteria": "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1C795B9-E58D-467C-83A8-2D45C792292F"
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91CD5E8A-20E3-4193-BD1F-99FB1147081C",
"versionEndExcluding": "11.5"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "product-security@apple.com"
}