CVE-2021-30883

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected

Apple · iOS and iPadOS · macOS

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

14.72% chance of exploitation in the next 30 days, 97th percentile

CISA KEV

added 2022-05-23

Published

2021-08-24

Updated

2025-10-21

Proof-of-concept exploits (3)

• nanerasingh/IOMFB_integer_overflow_poc0★ · 2021-10-15
• nanerasingh/IOMFB_integer_overflow_poc10★ · 2021-10-27
• saaramar/IOMFB_integer_overflow_poc150★ · 2021-10-11

Security advisories

• https://support.apple.com/en-us/HT212846
• https://support.apple.com/en-us/HT212868
• https://support.apple.com/en-us/HT212869
• https://support.apple.com/en-us/HT212872
• https://support.apple.com/en-us/HT212874
• https://support.apple.com/en-us/HT212876

References

• CVE Record
• NVD entry

Related

• CVE-2021-30740
• CVE-2021-30768
• CVE-2021-30769
• CVE-2021-30770
• CVE-2021-30773
• CVE-2018-0743