An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.15.6 | 10.15.6 |
Mac_os_x | Apple | 10.15.6 | 10.15.6 |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Mac_os_x | Apple | 10.14.6 | 10.14.6 |
Macos | Apple | 11.0 | * |
Iphone_os | Apple | * | * |
Mac_os_x | Apple | 10.15.7 | 10.15.7 |
Tvos | Apple | * | * |
Watchos | Apple | * | * |
Ipados | Apple | * | * |
Mac_os_x | Apple | 10.14 | 10.14.5 |
Mac_os_x | Apple | 10.15 | 10.15.5 |