PT-2021-2816

CVE-2021-1817

·

Published

2020-11-23

·

Updated

2026-10-31

Description by

CVSS 2.0
9.0
High
MetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5
Description: The issue is related to a memory corruption problem due to a buffer overflow in the WebKitGTK module. This can be exploited by a remote attacker using a specially crafted malicious web page, potentially leading to arbitrary code execution. The problem was addressed with improved state management.
Recommendations: For macOS versions prior to 11.3, update to macOS Big Sur 11.3 or later. For iOS versions prior to 14.5, update to iOS 14.5 or later. For iPadOS versions prior to 14.5, update to iPadOS 14.5 or later. For watchOS versions prior to 7.4, update to watchOS 7.4 or later. For tvOS versions prior to 14.5, update to tvOS 14.5 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALSA-2021:1586
CESA-2021_1586
CLEANSTART-2024-FR13662
DSA-4797-1
DSA-4797-2
OPENSUSE-SU-2022:0182-1
OPENSUSE-SU-2022_0182-1
OPENSUSE-SU-2022_0182-2
OPENSUSE-SU-2024:11506-1
RHSA-2021:1586
RHSA-2021_1586
RHSA-2025:10364
RLSA-2021:1586
SUSE-SU-2022:0142-1
SUSE-SU-2022:0182-1
SUSE-SU-2022:0182-2
SUSE-SU-2022:0183-1
Found an issue in the description? Have something to add? Feel free to write us 👾