CVE-2021-30840

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 15 Apple iPadOS versions prior to 15 Apple tvOS versions prior to 15 Apple watchOS versions prior to 8

Description The issue is related to the FontParser component in Apple operating systems, which is vulnerable to a buffer overflow in memory. This can be exploited by processing a maliciously crafted dfont file, potentially leading to arbitrary code execution.

Recommendations For Apple iOS versions prior to 15, update to iOS 15 or later to resolve the issue. For Apple iPadOS versions prior to 15, update to iPadOS 15 or later to resolve the issue. For Apple tvOS versions prior to 15, update to tvOS 15 or later to resolve the issue. For Apple watchOS versions prior to 8, update to watchOS 8 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted dfont files until a patch is applied.