High severity7.8CISA KEVNVD Advisory· Published Aug 24, 2021· Updated Jun 17, 2026

CVE-2021-30952

Description

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Safari2 versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <15.2
- (no CPE)range: =15.2
Webkitgtk/Webkitgtk
cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*
Range: <2.34.4
Wpewebkit/Wpe Webkit
cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:*
Range: <2.34.4
Apple Inc./Ipados2 versions
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <15.2
- (no CPE)range: =15.2
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <15.2
Apple Inc./macOS3 versions
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: >=12.0,<12.1
- (no CPE)range: =12.1
- (no CPE)range: unspecified
Apple Inc./tvOS2 versions
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <15.2
- (no CPE)range: =15.2
Apple Inc./watchOS3 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <8.3
- (no CPE)range: =8.3
- (no CPE)range: unspecified
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Apple Inc./iOSllm-fuzzy
Range: =15.2
osv-coords41 versions
pkg:rpm/almalinux/webkit2gtk3 pkg:rpm/almalinux/webkit2gtk3-devel pkg:rpm/almalinux/webkit2gtk3-jsc pkg:rpm/almalinux/webkit2gtk3-jsc-devel pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 2.34.6-1.el8+ 40 more
- (no CPE)range: < 2.34.6-1.el8
- (no CPE)range: < 2.34.6-1.el8
- (no CPE)range: < 2.34.6-1.el8
- (no CPE)range: < 2.34.6-1.el8
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-3.97.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.6-29.1
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
- (no CPE)range: < 2.34.5-2.85.3
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kitnvdExploitThird Party Advisory
www.openwall.com/lists/oss-security/2022/01/21/2nvdMailing ListThird Party Advisory
support.apple.com/en-us/HT212975nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT212976nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT212978nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT212980nvdRelease NotesVendor Advisory
support.apple.com/en-us/HT212982nvdRelease NotesVendor Advisory
www.debian.org/security/2022/dsa-5060nvdMailing ListThird Party Advisory
www.debian.org/security/2022/dsa-5061nvdMailing ListThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM/nvdBroken Link
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V/nvdBroken Link
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.006
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000