CVE-2021-30860

CRITICAL · 9.5 CVSS Gepubliceerd: 03-11-2021 CWE-20

Beschrijving

Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.

Required action: Apply updates per vendor instructions.

Vendors

Apple

Affected products

Multiple Products

References

nvd.nist.gov