Out-of-bounds read in macOS - CVE-2021-1811

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition within the CoreText component when processing specially crafted font files. A remote attacker can create a specially crafted font file, trick the victim into opening a document or a web page that contains the malicious font, trigger out-of-bounds read error and read contents of memory on the system.

Affected software

How to mitigate CVE-2021-1811

External References

• https://support.apple.com/en-us/HT212326
• https://support.apple.com/en-us/HT212325
• https://support.apple.com/en-us/HT212327

Related Security Bulletins

• Multiple vulnerabilities in macOS
• Multiple vulnerabilities in Apple iCloud for Windows
• Multiple vulnerabilities in Apple iTunes for Windows
• Multiple vulnerabilities in Apple iOS and iPadOS
• Multiple vulnerabilities in Apple tvOS
• Multiple vulnerabilities in Apple watchOS