CVE-2021-30952
Apple Multiple Products Integer Overflow or Wraparound Vulnerability
Published Aug 24, 2021 · updated Jun 16, 2026 · Apple Multiple Products
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Timeline
Detection, updates, and resolution for this record.
Aug 24, 2021 · Catalog
Detected
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Mar 5, 2026 · CISA KEV
Known exploited
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Mar 26, 2026 · CISA KEV
Remediation due
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CISA due date Mar 26, 2026
Affected
- cpe apple/ipadosversion unspecified
- cpe apple/iphone osversion unspecified
- cpe apple/macosversion unspecified
- cpe apple/safariversion unspecified
- cpe apple/tvosversion unspecified
- cpe apple/watchosversion unspecified
- cpe debian/debian linux10.0
- cpe fedoraproject/fedora34
- cpe fedoraproject/fedora35
- cpe webkitgtk/webkitgtkversion unspecified
- vendor Apple Multiple Productsversion unspecified
Sources
- CISA KEVCVE-2021-30952
Apple tvOS, macOS, Safari, iPadOS and watchOS contain an integer overflow or wraparound vulnerability due to the processing of maliciously crafted web content that may lead to arbitrary code execution.
cisa.gov - CVE.orgCVE-2021-30952
Official CVE identifier
cve.org - FIRST EPSSCVE-2021-30952
30-day exploitation probability 7.0%
first.org - NIST NVDCVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.
nvd.nist.gov