CVE-2021-30900

Apple iOS and iPadOS

Published 24 Aug 2021 · updated 17 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 30 Mar 2023, with a remediation deadline of 20 Apr 2023 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

References

support.apple.com/en-us/HT212867 · Vendor Advisory
support.apple.com/en-us/HT212868 · Vendor Advisory
support.apple.com/kb/HT212872 · Vendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30900 · US Government Resource