ID:7259 - Exploit for Out-of-bounds read in macOS - CVE-2021-30939

 
Main Vulnerability Database Exploits ID:7259 - Exploit for Out-of-bounds read in macOS - CVE-2021-30939

ID:7259 - Exploit for Out-of-bounds read in macOS - CVE-2021-30939

Published: January 25, 2022


Vulnerability identifier: #VU58858
Vulnerability risk: High
CVE-ID: CVE-2021-30939
CWE-ID: CWE-125
Exploitation vector: Remote access
Vulnerable software:
macOS

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing DDS images in ImageIO. A remote attacker can create a specially crafted image file, trick the victim into opening it using the affected software, trigger out-of-bounds read error and execute arbitrary code on the target system.


Remediation

Install updates from vendor's website.