Description (CNA)
A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of reports that an exploit for this issue exists in the wild.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS and iPadOS | affected unspecified before 14.4 |
| Apple / macOS | affected unspecified before 11.2 |
| Apple / macOS | affected unspecified before 12.5 |
| Apple / macOS | affected unspecified before 2021 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT212147
- https://support.apple.com/en-us/HT212146
- https://support.apple.com/en-us/HT212824
- https://support.apple.com/en-us/HT212825
ADP enrichment
No English description supplied.
No English description supplied.