Description (CNA)
A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS and iPadOS | affected unspecified before 14.5 |
| Apple / iTunes for Windows | affected unspecified before 12.11 |
| Apple / iCloud for Windows | affected unspecified before 12.3 |
| Apple / tvOS | affected unspecified before 14.5 |
| Apple / watchOS | affected unspecified before 7.4 |
| Apple / macOS | affected unspecified before 11.3 |
| Apple / macOS | affected unspecified before 2021 |
| Apple / macOS | affected unspecified before 2021 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212327
- https://support.apple.com/en-us/HT212319
- https://support.apple.com/en-us/HT212321
ADP enrichment
No English description supplied.
- https://support.apple.com/en-us/HT212317
- https://support.apple.com/en-us/HT212323
- https://support.apple.com/en-us/HT212324
- https://support.apple.com/en-us/HT212325
- https://support.apple.com/en-us/HT212326
- https://support.apple.com/en-us/HT212327
- https://support.apple.com/en-us/HT212319
- https://support.apple.com/en-us/HT212321