CVE-2021-30724: CVMServer Vulnerability in macOS and iOS
trendmicro.com · 3 Jun 2021 · Licence: not assessed; coordinator-only cache; do not redistribute
CVEs this report names
1 CVE- CVE-2021-30724This issue was addressed with improved checksApple · iOS and iPadOS1 report0.8%Top 43%15.2priority
Where it names them
CVE-2021-30724 Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗ Original (opens in a new tab) ↗
The vulnerability, labeled CVE-2021-30724, is triggered by an integer overflow leading to an out-of-bounds memory access, from which point privilege escalation can be attained.
Apple has already made a fix for CVE-2021-30724.
As an aside, we found that the binary CVMCompiler has the same issue, which has also been fixed using this method used for CVE-2021-30724.
If CVE-2021-30724 is left unpatched, an attacker can elevate his privileges by exploiting the vulnerability.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.