CVE-2021-30761

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 12.5.4

Description A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. The issue is related to a buffer overflow when handling HTML content, which can allow a remote attacker to execute arbitrary code using a specially crafted malicious website.

Recommendations For versions prior to 12.5.4, update to iOS 12.5.4 to resolve the issue. As a temporary workaround, consider restricting access to malicious web content to minimize the risk of exploitation. Avoid using the affected WebKit module until the issue is resolved.