CVE-2021-30900

Timeline

Detection, updates, and resolution for this record.

1. Aug 24, 2021 · Catalog

   Detected

   An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

2. Mar 30, 2023 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 20, 2023 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected

• cpe apple/ipadosversion unspecified
• cpe apple/ipados15.0
• cpe apple/iphone osversion unspecified
• cpe apple/iphone os15.0
• cpe apple/macosversion unspecified
• vendor Apple iOS, iPadOS, and macOSversion unspecified

Sources

• CISA KEVCVE-2021-30900

  Apple GPU drivers, included in iOS, iPadOS, and macOS, contain an out-of-bounds write vulnerability that may allow a malicious application to execute code with kernel privileges.

  cisa.gov
• CVE.orgCVE-2021-30900

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2021-30900

  30-day exploitation probability 5.2%

  first.org
• NIST NVDCVE-2021-30900

  An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A malicious application may be able to execute arbitrary code with kernel privileges.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• CISA note · support.apple.com
• Vendor Advisory · support.apple.com
• CISA note · support.apple.com
• CISA note · support.apple.com
• US Government Resource · cisa.gov