Sign-up

ID

VAR-202104-0649


CVE

CVE-2021-1785


TITLE

Apple macOS Buffer error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202102-084

DESCRIPTION

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution. Apple macOS is a set of dedicated operating systems developed by Apple Corporation for Mac computers. A security vulnerability exists in Apple macOS due to a boundary condition when originating from an image file within the ImageIO component of macOS. A remote attacker could create a specially crafted file, trick a victim into opening it, trigger an out-of-bounds read error, and read the contents of memory on the system. Vulnerabilities exist in the following products or versions: macOS 10.15, macOS 10.15 SU1, macOS 10.15.1, macOS 10.15.2, macOS 10.15.3, macOS 10.15.4, macOS 10.15.4 SU1, macOS 10.15.5, macOS 11.55.5 SU1 , macOS 15.65.6, macOS 10.15.6 SU1, macOS 10.15.7, 10.15.7 SU1, macOS 11.0, macOS 11.0.1, macOS 11.1. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2021-02-01-3 Additional information for APPLE-SA-2021-01-26-2 tvOS 14.4 tvOS 14.4 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT212149. Analytics Available for: Apple TV 4K and Apple TV HD Impact: A remote attacker may be able to cause a denial of service Description: This issue was addressed with improved checks. CVE-2021-1761: Cees Elzinga Entry added February 1, 2021 APFS Available for: Apple TV 4K and Apple TV HD Impact: A local user may be able to read arbitrary files Description: The issue was addressed with improved permissions logic. CVE-2021-1797: Thomas Tempelmann Entry added February 1, 2021 CoreAnimation Available for: Apple TV 4K and Apple TV HD Impact: A malicious application could execute arbitrary code leading to compromise of user information Description: A memory corruption issue was addressed with improved state management. CVE-2021-1760: @S0rryMybad of 360 Vulcan Team Entry added February 1, 2021 CoreAudio Available for: Apple TV 4K and Apple TV HD Impact: Processing maliciously crafted web content may lead to code execution Description: An out-of-bounds write was addressed with improved input validation. CVE-2021-1747: JunDong Xie of Ant Security Light-Year Lab Entry added February 1, 2021 CoreGraphics Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted font file may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. CVE-2021-1776: Ivan Fratric of Google Project Zero Entry added February 1, 2021 CoreMedia Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2021-1759: Hou JingYi (@hjy79425575) of Qihoo 360 CERT Entry added February 1, 2021 CoreText Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted text file may lead to arbitrary code execution Description: A stack overflow was addressed with improved input validation. CVE-2021-1772: Mickey Jin of Trend Micro Entry added February 1, 2021 CoreText Available for: Apple TV 4K and Apple TV HD Impact: A remote attacker may be able to cause arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2021-1792: Mickey Jin & Junzhi Lu of Trend Micro Entry added February 1, 2021 Crash Reporter Available for: Apple TV 4K and Apple TV HD Impact: A local user may be able to create or modify system files Description: A logic issue was addressed with improved state management. CVE-2021-1786: Csaba Fitzl (@theevilbit) of Offensive Security Entry added February 1, 2021 Crash Reporter Available for: Apple TV 4K and Apple TV HD Impact: A local attacker may be able to elevate their privileges Description: Multiple issues were addressed with improved logic. CVE-2021-1787: James Hutchins Entry added February 1, 2021 FairPlay Available for: Apple TV 4K and Apple TV HD Impact: A malicious application may be able to disclose kernel memory Description: An out-of-bounds read issue existed that led to the disclosure of kernel memory. CVE-2021-1791: Junzhi Lu (@pwn0rz), Qi Sun & Mickey Jin of Trend Micro Entry added February 1, 2021 FontParser Available for: Apple TV 4K and Apple TV HD Impact: A remote attacker may be able to cause arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2021-1758: Peter Nguyen of STAR Labs Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to a denial of service Description: This issue was addressed with improved checks. CVE-2021-1766: Danny Rosseau of Carve Systems Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2021-1785: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write was addressed with improved input validation. CVE-2021-1744: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A logic issue was addressed with improved state management. CVE-2021-1818: Xingwei Lin from Ant-financial Light-Year Security Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: This issue was addressed with improved checks. CVE-2021-1746: Xingwei Lin of Ant Security Light-Year Lab, and Mickey Jin & Qi Sun of Trend Micro CVE-2021-1793: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to a denial of service Description: A logic issue was addressed with improved state management. CVE-2021-1773: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2021-1741: Xingwei Lin of Ant Security Light-Year Lab CVE-2021-1743: Xingwei Lin of Ant Security Light-Year Lab, and Mickey Jin & Junzhi Lu of Trend Micro Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to a denial of service Description: An out-of-bounds read issue existed in the curl. CVE-2021-1778: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 ImageIO Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted image may lead to arbitrary code execution Description: An access issue was addressed with improved memory management. CVE-2021-1783: Xingwei Lin of Ant Security Light-Year Lab Entry added February 1, 2021 IOSkywalkFamily Available for: Apple TV 4K and Apple TV HD Impact: A local attacker may be able to elevate their privileges Description: An out-of-bounds read was addressed with improved bounds checking. CVE-2021-1757: Proteas and Pan ZhenPeng (@Peterpan0927) of Alibaba Security Entry added February 1, 2021 iTunes Store Available for: Apple TV 4K and Apple TV HD Impact: Processing a maliciously crafted URL may lead to arbitrary javascript code execution Description: A validation issue was addressed with improved input sanitization. CVE-2021-1748: CodeColorist of Ant-Financial Light-Year Labs Entry added February 1, 2021 Kernel Available for: Apple TV 4K and Apple TV HD Impact: A remote attacker may be able to cause a denial of service Description: A use after free issue was addressed with improved memory management. CVE-2021-1764: Maxime Villard (m00nbsd) Entry added February 1, 2021 Kernel Available for: Apple TV 4K and Apple TV HD Impact: An application may be able to execute arbitrary code with kernel privileges Description: Multiple issues were addressed with improved logic. CVE-2021-1750: @0xalsr Entry added February 1, 2021 Kernel Available for: Apple TV 4K and Apple TV HD Impact: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited. CVE-2021-1782: an anonymous researcher Swift Available for: Apple TV 4K and Apple TV HD Impact: A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication Description: A logic issue was addressed with improved validation. CVE-2021-1769: CodeColorist of Ant-Financial Light-Year Labs Entry added February 1, 2021 WebKit Available for: Apple TV 4K and Apple TV HD Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A use after free issue was addressed with improved memory management. CVE-2021-1788: Francisco Alonso (@revskills) Entry added February 1, 2021 WebKit Available for: Apple TV 4K and Apple TV HD Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved state handling. CVE-2021-1789: @S0rryMybad of 360 Vulcan Team Entry added February 1, 2021 WebKit Available for: Apple TV 4K and Apple TV HD Impact: Maliciously crafted web content may violate iframe sandboxing policy Description: This issue was addressed with improved iframe sandbox enforcement. CVE-2021-1801: Eliya Stein of Confiant Entry added February 1, 2021 WebRTC Available for: Apple TV 4K and Apple TV HD Impact: A malicious website may be able to access restricted ports on arbitrary servers Description: A port redirection issue was addressed with additional port validation. CVE-2021-1799: Gregory Vishnepolsky & Ben Seri of Armis Security, and Samy Kamkar Entry added February 1, 2021 Additional recognition iTunes Store We would like to acknowledge CodeColorist of Ant-Financial Light-Year Labs for their assistance. Entry added February 1, 2021 Kernel We would like to acknowledge Junzhi Lu (@pwn0rz), Mickey Jin & Jesse Change of Trend Micro for their assistance. Entry added February 1, 2021 libpthread We would like to acknowledge CodeColorist of Ant-Financial Light-Year Labs for their assistance. Entry added February 1, 2021 Store Demo We would like to acknowledge @08Tc3wBB for their assistance. Entry added February 1, 2021 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEbURczHs1TP07VIfuZcsbuWJ6jjAFAmAYgtcACgkQZcsbuWJ6 jjC2WQ//bJVyj/RBYwoj3boUw/SH7hZ+n6Ho3KPRZQE2XWZ0KSODHSoXOgaf5xX7 xWAf5vbOGdEueWj476hmlZZPediB7SJK6xEkvg3SKzZrc5+MlgRUjnrNd/qygi75 tPXjpkyIAHBY5Ik+uoSyxkLkCn3i50KFwtJCmyibl3ayb1XA2/jUA4FtQkhz3HrM ZhMkBPOSObKkGiyj90eBNmeJRSwrxvBQPcp/EwqHbND+Y8UYAQ9ZDbHXWBVuDeRV R1No2qLit0TCs6MZnVP2CKNprXMy/bHLlNeVYGGIu1W+qQ3I30XvlY69VcH6JdVF xz6JIiXAJoOYDUFzesY2b8kMe7jiZnnDK+gWHeodV4oirsImITTlGY4gdiGb30Ag 2XDFpGedK0g+fD+SKI0lCOColTi6IEtTRm4/0ClI0HMc0akJn3qZXOz+iXzTZCa3 tssd6H2lZAW98GmsnMazUdEyGR+9I9RSvaJkLNOBxgDG+NURoTJ6vxHH2B3DYb/+ i+blVGMt7EBIZNwloOR8Fc+Ho5YTCFIwSxeqUzS9Vw53Bx7qA0AVd6CPPJSctWZ0 WKg1N3iW+dBWLWr43idEUNgUADL8Ya35Q6EwW+FxMHLwS11d7xA24AT14vJyi+4w ftTKFGZsNaUGMo2dCZNUnyC23xv3R8GYso0jc3DL4e1pAmeW2Rk=0JBx -----END PGP SIGNATURE-----

Trust: 1.26

sources: NVD: CVE-2021-1785 // VULHUB: VHN-376445 // VULMON: CVE-2021-1785 // PACKETSTORM: 161248 // PACKETSTORM: 161247

AFFECTED PRODUCTS

vendor:applemodel:ipadosscope:ltversion:14.4

Trust: 1.0

vendor:applemodel:tvosscope:ltversion:14.4

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.14.6

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.14.6

Trust: 1.0

vendor:applemodel:mac os xscope:gteversion:10.14

Trust: 1.0

vendor:applemodel:mac os xscope:gteversion:10.15

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:7.3

Trust: 1.0

vendor:applemodel:macosscope:ltversion:11.2

Trust: 1.0

vendor:applemodel:mac os xscope:eqversion:10.15.7

Trust: 1.0

vendor:applemodel:macosscope:gteversion:11.0

Trust: 1.0

vendor:applemodel:mac os xscope:ltversion:10.15.7

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:14.4

Trust: 1.0

sources: NVD: CVE-2021-1785

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-1785
value: HIGH

Trust: 1.0

CNNVD: CNNVD-202102-084
value: HIGH

Trust: 0.6

VULHUB: VHN-376445
value: MEDIUM

Trust: 0.1

VULMON: CVE-2021-1785
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-1785
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.1

VULHUB: VHN-376445
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-1785
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-376445 // VULMON: CVE-2021-1785 // CNNVD: CNNVD-202102-084 // NVD: CVE-2021-1785

PROBLEMTYPE DATA

problemtype:CWE-125

Trust: 1.1

sources: VULHUB: VHN-376445 // NVD: CVE-2021-1785

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202102-084

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202102-084

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-376445

PATCH
title:Apple macOS Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=140296
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-202102-084

EXTERNAL IDS
db:NVDid:CVE-2021-1785
Trust: 2.0
db:PACKETSTORMid:161247
Trust: 0.8
db:AUSCERTid:ESB-2021.0354
Trust: 0.6
db:CNNVDid:CNNVD-202102-084
Trust: 0.6
db:PACKETSTORMid:161248
Trust: 0.2
db:VULHUBid:VHN-376445
Trust: 0.1
db:VULMONid:CVE-2021-1785
Trust: 0.1
sources:
            
            
            VULHUB: VHN-376445 // 
            
            
            
            VULMON: CVE-2021-1785 // 
            
            
            
            PACKETSTORM: 161248 // 
            
            
            
            PACKETSTORM: 161247 // 
            
            
            
            CNNVD: CNNVD-202102-084 // 
            
            
            
            NVD: CVE-2021-1785

REFERENCES
url:https://support.apple.com/en-us/ht212146
Trust: 1.8
url:https://support.apple.com/en-us/ht212147
Trust: 1.8
url:https://support.apple.com/en-us/ht212148
Trust: 1.8
url:https://support.apple.com/en-us/ht212149
Trust: 1.8
url:https://nvd.nist.gov/vuln/detail/cve-2021-1785
Trust: 0.8
url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-34452
Trust: 0.6
url:https://packetstormsecurity.com/files/161247/apple-security-advisory-2021-02-01-3.html
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2021.0354/
Trust: 0.6
url:https://nvd.nist.gov/vuln/detail/cve-2021-1789
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1760
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1766
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1783
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1787
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1757
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1769
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1761
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1744
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1748
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1764
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1773
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1776
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1791
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1778
Trust: 0.2
url:https://www.apple.com/support/security/pgp/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1786
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1772
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1743
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1758
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1792
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1782
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1788
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1750
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1746
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1747
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2021-1741
Trust: 0.2
url:https://cwe.mitre.org/data/definitions/125.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:http://seclists.org/fulldisclosure/2021/feb/17
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2021-1793
Trust: 0.1
url:https://support.apple.com/ht212148.
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2021-1759
Trust: 0.1
url:https://support.apple.com/ht212149.
Trust: 0.1
sources:
            
            
            VULHUB: VHN-376445 // 
            
            
            
            VULMON: CVE-2021-1785 // 
            
            
            
            PACKETSTORM: 161248 // 
            
            
            
            PACKETSTORM: 161247 // 
            
            
            
            CNNVD: CNNVD-202102-084 // 
            
            
            
            NVD: CVE-2021-1785

CREDITS
Apple
Trust: 0.8
sources:
            
            
            PACKETSTORM: 161248 // 
            
            
            
            PACKETSTORM: 161247 // 
            
            
            
            CNNVD: CNNVD-202102-084

SOURCES
db:VULHUBid:VHN-376445
db:VULMONid:CVE-2021-1785
db:PACKETSTORMid:161248
db:PACKETSTORMid:161247
db:CNNVDid:CNNVD-202102-084
db:NVDid:CVE-2021-1785

LAST UPDATE DATE
2024-08-14T12:15:03.897000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-376445date:2021-04-09T00:00:00
db:VULMONid:CVE-2021-1785date:2021-04-09T00:00:00
db:CNNVDid:CNNVD-202102-084date:2021-04-13T00:00:00
db:NVDid:CVE-2021-1785date:2021-04-09T18:19:30.073

SOURCES RELEASE DATE
db:VULHUBid:VHN-376445date:2021-04-02T00:00:00
db:VULMONid:CVE-2021-1785date:2021-04-02T00:00:00
db:PACKETSTORMid:161248date:2021-02-02T16:09:50
db:PACKETSTORMid:161247date:2021-02-02T16:08:52
db:CNNVDid:CNNVD-202102-084date:2021-02-02T00:00:00
db:NVDid:CVE-2021-1785date:2021-04-02T18:15:21.497