CVE-2021-30860

Description

Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-30860
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-17777
• https://support.apple.com/en-us/HT212804
• https://support.apple.com/en-us/HT212805
• https://support.apple.com/en-us/HT212807
• https://support.apple.com/en-us/HT212806
• http://seclists.org/fulldisclosure/2021/Sep/28
• http://seclists.org/fulldisclosure/2021/Sep/27
• http://seclists.org/fulldisclosure/2021/Sep/25
• http://seclists.org/fulldisclosure/2021/Sep/26
• http://seclists.org/fulldisclosure/2021/Sep/40
• http://seclists.org/fulldisclosure/2021/Sep/38
• http://seclists.org/fulldisclosure/2021/Sep/39
• https://support.apple.com/kb/HT212824
• http://seclists.org/fulldisclosure/2021/Sep/50
• http://www.openwall.com/lists/oss-security/2022/09/02/11
• https://security.gentoo.org/glsa/202209-21