CVE-2021-30805

Vulnerability

A memory corruption issue exists in the AMD Kernel component of macOS, affecting versions prior to macOS Big Sur 11.5, Security Update 2021-004 Catalina, and Security Update 2021-005 Mojave [1][2][3]. The vulnerability is triggered when an application sends crafted input to the kernel, leading to improper validation and memory corruption.

Exploitation

An attacker must have the ability to run a malicious application on the target system. No additional privileges or user interaction beyond launching the application are required. The application can exploit the memory corruption by sending specially crafted data to the kernel, potentially triggering arbitrary code execution.

Impact

Successful exploitation allows the application to execute arbitrary code with kernel privileges, resulting in full compromise of the system's confidentiality, integrity, and availability. The attacker gains complete control over the affected macOS device.

Mitigation

Apple addressed this issue in macOS Big Sur 11.5, Security Update 2021-004 Catalina, and Security Update 2021-005 Mojave, all released on July 21, 2021 [1][2][3]. Users should update to the latest available version for their macOS release. No workarounds are documented.