CVE-2021-30848
Summary
| CVE | CVE-2021-30848 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-10-19 14:15:00 UTC |
| Updated | 2021-11-23 20:19:00 UTC |
| Description | A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 14.8 and iPadOS 14.8, Safari 15, iOS 15 and iPadOS 15. Processing maliciously crafted web content may lead to code execution. |
Risk And Classification
Problem Types: CWE-787
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Full Disclosure: APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15 | FULLDISC | seclists.org | |
| About the security content of iOS 15 and iPadOS 15 - Apple Support | MISC | support.apple.com | |
| oss-security - Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 | MLIST | www.openwall.com | |
| About the security content of Safari 15 - Apple Support | MISC | support.apple.com | |
| oss-security - WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 | MLIST | www.openwall.com | |
| Full Disclosure: APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 | FULLDISC | seclists.org | |
| oss-security - Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 | MLIST | www.openwall.com | |
| oss-security - Re: WebKitGTK and WPE WebKit Security Advisory WSA-2021-0006 | MLIST | www.openwall.com | |
| About the security content of macOS Monterey 12.0.1 - Apple Support | CONFIRM | support.apple.com | |
| About the security content of iOS 14.8 and iPadOS 14.8 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159799 Oracle Enterprise Linux Security Update for webkit2gtk3 (ELSA-2022-1777)
- 182881 Debian Security Update for webkit2gtkwpewebkit (CVE-2021-30848)
- 240305 Red Hat Update for webkit2gtk3 security (RHSA-2022:1777)
- 296061 Oracle Solaris 11.4 Support Repository Update (SRU) 42.113.1 Missing (CPUJAN2022)
- 354436 Amazon Linux Security Advisory for webkit2gtk3 : ALAS2022-2022-015
- 355438 Amazon Linux Security Advisory for webkitgtk4 : ALAS2-2023-2088
- 375878 Apple Safari Multiple Vulnerabilities (HT212816)
- 502197 Alpine Linux Security Update for webkit2gtk
- 502394 Alpine Linux Security Update for webkit2gtk
- 505522 Alpine Linux Security Update for webkit2gtk
- 610370 Apple iOS 15 and iPadOS 15 Security Update Missing
- 710570 Gentoo Linux WebkitGTK+ Multiple Vulnerabilities (GLSA 202202-01)
- 751623 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0142-1)
- 751646 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0183-1)
- 751648 SUSE Enterprise Linux Security Update for webkit2gtk3 (SUSE-SU-2022:0182-1)
- 751659 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-1)
- 751755 OpenSUSE Security Update for webkit2gtk3 (openSUSE-SU-2022:0182-2)
- 940505 AlmaLinux Security Update for webkit2gtk3 (ALSA-2022:1777)