{"id":"CVE-2021-30883","kind":"vulnerability","aliases":["CVE-2021-30883"],"related":[],"title":"Apple Multiple Products: Apple Multiple Products Memory Corruption Vulnerability","description":"A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..","summary":"Apple iOS, macOS, watchOS and tvOS contain a memory corruption flaw in the kernel-level image or media handling path (CVE-2021-30883, known as the IOMobileFrameBuffer-style issue; sources do not name the component). An attacker can run code on an affected Apple device.","severity":"critical","cvss":9.3,"epss":0.14721,"exploited":true,"exploited_at":"2022-05-23T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple","exploited","infrastructure","ios","macos","tvos","watchos"],"not_affected_if":["unpatched-devices-only"],"how_to_check":null,"fix":"Update iOS, macOS, watchOS and tvOS to a release that includes Apple's fix; sources do not name the fixed version.\nCISA directs federal agencies to apply vendor updates.","status":"open","published_at":"2021-08-24T19:15:16+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:16:00+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T21:16:00Z","model":"claude-haiku-5-5","output":{"fix":"Update iOS, macOS, watchOS and tvOS to a release that includes Apple's fix; sources do not name the fixed version.\nCISA directs federal agencies to apply vendor updates.","reach":"internet","impact":"high","summary":"Apple iOS, macOS, watchOS and tvOS contain a memory corruption flaw in the kernel-level image or media handling path (CVE-2021-30883, known as the IOMobileFrameBuffer-style issue; sources do not name the component). An attacker can run code on an affected Apple device.","category":"infrastructure","who_cares":["apple","ios","macos","watchos","tvos"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker runs code on the Apple device remotely.","analyst_note":"Sources do not name the affected component or fixed versions; check Apple security notes for the 2021 iOS/macOS releases and the CISA KEV entry for due date.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unpatched-devices-only"],"user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000485,"input_tokens":2825,"output_tokens":404,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2021':11A,14A,48B '-30883':12A,15A,49B '..':135C '11.6.1':108C '12.0.1':95C '14.8.1':97C,100C '15.0.2':89C,92C '15.1':102C '8.1':104C 'abl':113C 'activ':133C 'address':78C 'affect':70B 'appl':1A,4A,19B,26B,71B,121C 'apple':16A 'applic':110C 'arbitrari':116C 'attack':64B 'awar':123C 'big':106C 'code':67B,117C 'compon':62B 'contain':32B 'corrupt':8A,35B,75C 'cve':10A,13A,47B 'devic':72B 'execut':115C 'exploit':20B,134C 'fix':86C 'flaw':36B 'handl':45B,82C 'imag':42B 'improv':80C 'infrastructur':21B 'io':22B,27B,88C,96C 'iomobileframebuff':54B 'iomobileframebuffer-styl':53B 'ipado':91C,99C 'issu':56B,76C,84C,129C 'kernel':40B,119C 'kernel-level':39B 'known':50B 'level':41B 'maco':23B,28B,93C,105C 'may':111C,130C 'media':44B 'memori':7A,34B,74C,81C 'monterey':94C 'multipl':2A,5A 'multiple':17A 'name':60B 'path':46B 'privileg':120C 'product':3A,6A 'products':18A 'report':126C 'run':66B 'sourc':57B 'style':55B 'sur':107C 'tvos':24B,31B,101C 'vulner':9A 'watcho':25B,29B,103C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2021-08-24T19:15:16+00:00","kev":{"dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2021-30883","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-30883","severity":null,"published_at":"2022-05-23T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T16:39:48+00:00","note":null},{"source":"epss","external_id":"CVE-2021-30883","url":"https://api.first.org/data/v1/epss?cve=CVE-2021-30883","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2021-30883","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30883","severity":null,"published_at":"2021-08-24T19:15:16+00:00","modified_at":"2026-06-17T03:51:04+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}