VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-30911

CVE-2021-30911

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.0.1, Security Update 2021-007 Catalina, iOS 15.1 and iPadOS 15.1, macOS Big Sur 11.6.1. Processing a maliciously crafted USD file may disclose memory contents.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <15.1
    • (no CPE)range: >=15.1
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <15.1
  • Apple Inc./Mac OS X10 versions
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: <10.15.7
    • cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-006:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*
  • Apple Inc./macOS4 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=11.0,<11.6.1
    • cpe:2.3:o:apple:macos:12.0:*:*:*:*:*:*:*
    • (no CPE)range: >=12.0.1
    • (no CPE)range: unspecified
  • Apple Inc./iOSllm-fuzzy
    Range: >=15.1
  • Apple Inc./iOS and iPadOScpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.