CVE-2021-1807

2021-09-0814:55:48

apple

www.cve.org

validation issue

input sanitization

ios 14.5

ipados 14.5

watchos 7.4

local user

arbitrary files

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files.

CNA Affected

[
  {
    "product": "iOS and iPadOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "14.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "watchOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "7.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT212317

support.apple.com/en-us/HT212324