#VU53607 Information disclosure in Apple M1 - CVE-2021-30747
Published: May 27, 2021
Vulnerability identifier: #VU53607
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2021-30747
CWE-ID: CWE-200
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Apple M1
Apple M1
Software vendor:
Apple Inc.
Apple Inc.
Description
The vulnerability allows a local attacker to gain access to potentially sensitive information.
The vulnerability exists due to a flaw in the design of the Apple Silicon "M1" chip which allows any two applications running under an OS to covertly exchange data between them, without using memory, sockets, files, or any other normal operating system features. A local attacker can gain unauthorized access to sensitive information on the system.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.