Description (CNA)
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / watchOS | affected unspecified before 8.3 |
| Apple / iOS and iPadOS | affected unspecified before 15.2 |
| Apple / macOS | affected unspecified before 12.1 |
| Apple / macOS | affected unspecified before 11.6 |
| Apple / macOS | affected unspecified before 15.2 |
| Apple / macOS | affected unspecified before 2021 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212979
- https://support.apple.com/en-us/HT212981
- https://support.apple.com/en-us/HT212980
- http://packetstormsecurity.com/files/165475/XNU-inm_merge-Heap-Use-After-Free.html
ADP enrichment
No English description supplied.
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212979
- https://support.apple.com/en-us/HT212981
- https://support.apple.com/en-us/HT212980
- http://packetstormsecurity.com/files/165475/XNU-inm_merge-Heap-Use-After-Free.html