Provide references for further information: Can you share references or external links related to CVE-2021-1808?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1808?


Explain the CVE ID: What does the identifier CVE-2021-1809 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1809.

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to read restricted memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1809?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1809?


Explain the CVE ID: What does the identifier CVE-2021-1810 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1810.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application may bypass Gatekeeper checks.


Provide references for further information: Can you share references or external links related to CVE-2021-1810?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/164375/Gatekeeper-Bypass-Proof-Of-Concept.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1810?


Explain the CVE ID: What does the identifier CVE-2021-1811 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1811.

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing a maliciously crafted font may result in the disclosure of process memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1811?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1811?


Explain the CVE ID: What does the identifier CVE-2021-1812 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1812.

A logic issue was addressed with improved validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A malicious application may be able to execute arbitrary code with system privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1812?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1812?


Explain the CVE ID: What does the identifier CVE-2021-1813 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1813.

A validation issue was addressed with improved logic. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to gain root privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1813?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1813?


Explain the CVE ID: What does the identifier CVE-2021-1814 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1814.

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1814?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1814?


Explain the CVE ID: What does the identifier CVE-2021-1815 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1815.

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.


Provide references for further information: Can you share references or external links related to CVE-2021-1815?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1815?


Explain the CVE ID: What does the identifier CVE-2021-1816 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1816.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1816?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1816?


Explain the CVE ID: What does the identifier CVE-2021-1817 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1817.

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1817?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1817?


Explain the CVE ID: What does the identifier CVE-2021-1818 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1818.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1818?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212149'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1818?


Explain the CVE ID: What does the identifier CVE-2021-1820 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1820.

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1820?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1820?


Explain the CVE ID: What does the identifier CVE-2021-1821 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1821.

A logic issue was addressed with improved state management. This issue is fixed in watchOS 7.6, macOS Big Sur 11.5. Visiting a maliciously crafted webpage may lead to a system denial of service.


Provide references for further information: Can you share references or external links related to CVE-2021-1821?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212602'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1821?


Explain the CVE ID: What does the identifier CVE-2021-1822 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1822.

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A local user may be able to modify protected parts of the file system.


Provide references for further information: Can you share references or external links related to CVE-2021-1822?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1822?


Explain the CVE ID: What does the identifier CVE-2021-1824 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1824.

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. A malicious application with root privileges may be able to access private information.


Provide references for further information: Can you share references or external links related to CVE-2021-1824?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1824?


Explain the CVE ID: What does the identifier CVE-2021-1825 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1825.

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross site scripting attack.


Provide references for further information: Can you share references or external links related to CVE-2021-1825?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212318'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1825?


Explain the CVE ID: What does the identifier CVE-2021-1826 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1826.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may lead to universal cross site scripting.


Provide references for further information: Can you share references or external links related to CVE-2021-1826?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1826?


Explain the CVE ID: What does the identifier CVE-2021-1828 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1828.

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An application may be able to cause unexpected system termination or write kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1828?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1828?


Explain the CVE ID: What does the identifier CVE-2021-1829 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1829.

A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1829?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1829?


Explain the CVE ID: What does the identifier CVE-2021-1830 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1830.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1830?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1830?


Explain the CVE ID: What does the identifier CVE-2021-1831 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1831.

The issue was addressed with improved permissions logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may allow shortcuts to access restricted files.


Provide references for further information: Can you share references or external links related to CVE-2021-1831?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1831?


Explain the CVE ID: What does the identifier CVE-2021-1832 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1832.

Copied files may not have the expected file permissions. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. The issue was addressed with improved permissions logic.


Provide references for further information: Can you share references or external links related to CVE-2021-1832?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1832?


Explain the CVE ID: What does the identifier CVE-2021-1833 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1833.

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to gain elevated privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1833?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1833?


Explain the CVE ID: What does the identifier CVE-2021-1834 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1834.

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1834?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1834?


Explain the CVE ID: What does the identifier CVE-2021-1835 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1835.

This issue was addressed with improved checks. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to access notes from the lock screen.


Provide references for further information: Can you share references or external links related to CVE-2021-1835?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1835?


Explain the CVE ID: What does the identifier CVE-2021-1836 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1836.

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 14.5 and iPadOS 14.5, tvOS 14.5. A local user may be able to create or modify privileged files.


Provide references for further information: Can you share references or external links related to CVE-2021-1836?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1836?


Explain the CVE ID: What does the identifier CVE-2021-1837 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1837.

A certificate validation issue was addressed. This issue is fixed in iOS 14.5 and iPadOS 14.5. An attacker in a privileged network position may be able to alter network traffic.


Provide references for further information: Can you share references or external links related to CVE-2021-1837?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1837?


Explain the CVE ID: What does the identifier CVE-2021-1838 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1838.

This issue was addressed with improved checks. This issue is fixed in iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1838?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1838?


Explain the CVE ID: What does the identifier CVE-2021-1839 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1839.

The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1839?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1839?


Explain the CVE ID: What does the identifier CVE-2021-1840 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1840.

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A local attacker may be able to elevate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1840?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1840?


Explain the CVE ID: What does the identifier CVE-2021-1841 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1841.

A malicious application may be able to execute arbitrary code with kernel privileges. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina. An out-of-bounds write issue was addressed with improved bounds checking.


Provide references for further information: Can you share references or external links related to CVE-2021-1841?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1841?


Explain the CVE ID: What does the identifier CVE-2021-1842 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1842.


Provide references for further information: Can you share references or external links related to CVE-2021-1842?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1842?


Explain the CVE ID: What does the identifier CVE-2021-1843 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1843.

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted image may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1843?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1843?


Explain the CVE ID: What does the identifier CVE-2021-1844 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1844.

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1844?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212220'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212221'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212222'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212223'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/kb/HT212323'}, {'name': '20210427 APPLE-SA-2021-04-26-6 tvOS 14.5', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2021/Apr/55'}, {'name': 'DSA-4923', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4923'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1844?


Explain the CVE ID: What does the identifier CVE-2021-1846 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1846.

Processing a maliciously crafted audio file may disclose restricted memory. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds read was addressed with improved input validation.


Provide references for further information: Can you share references or external links related to CVE-2021-1846?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1846?


Explain the CVE ID: What does the identifier CVE-2021-1847 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1847.

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1847?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1847?


Explain the CVE ID: What does the identifier CVE-2021-1848 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1848.

The issue was addressed with improved UI handling. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to view sensitive information in the app switcher.


Provide references for further information: Can you share references or external links related to CVE-2021-1848?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1848?


Explain the CVE ID: What does the identifier CVE-2021-1849 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1849.

An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. A malicious application may be able to bypass Privacy preferences.


Provide references for further information: Can you share references or external links related to CVE-2021-1849?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1849?


Explain the CVE ID: What does the identifier CVE-2021-1851 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1851.

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1851?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1851?


Explain the CVE ID: What does the identifier CVE-2021-1852 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1852.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1852?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1852?


Explain the CVE ID: What does the identifier CVE-2021-1853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1853.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1853?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1853?


Explain the CVE ID: What does the identifier CVE-2021-1854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1854.

A call termination issue with was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A legacy cellular network can automatically answer an incoming call when an ongoing call ends or drops. .


Provide references for further information: Can you share references or external links related to CVE-2021-1854?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1854?


Explain the CVE ID: What does the identifier CVE-2021-1855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1855.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to force unnecessary network connections to fetch its favicon.


Provide references for further information: Can you share references or external links related to CVE-2021-1855?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1855?


Explain the CVE ID: What does the identifier CVE-2021-1857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1857.

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.


Provide references for further information: Can you share references or external links related to CVE-2021-1857?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212319'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212321'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1857?


Explain the CVE ID: What does the identifier CVE-2021-1858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1858.

Processing a maliciously crafted image may lead to arbitrary code execution. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An out-of-bounds write issue was addressed with improved bounds checking.


Provide references for further information: Can you share references or external links related to CVE-2021-1858?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1858?


Explain the CVE ID: What does the identifier CVE-2021-1859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1859.

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3. Locked Notes content may have been unexpectedly unlocked.


Provide references for further information: Can you share references or external links related to CVE-2021-1859?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1859?


Explain the CVE ID: What does the identifier CVE-2021-1860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1860.

A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A malicious application may be able to disclose kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1860?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1860?


Explain the CVE ID: What does the identifier CVE-2021-1861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1861.

An issue existed in determining cache occupancy. The issue was addressed through improved logic. This issue is fixed in macOS Big Sur 11.3. A malicious website may be able to track users by setting state in a cache.


Provide references for further information: Can you share references or external links related to CVE-2021-1861?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1861?


Explain the CVE ID: What does the identifier CVE-2021-1862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1862.

Description: A person with physical access may be able to access contacts. This issue is fixed in iOS 14.5 and iPadOS 14.5. Impact: An issue with Siri search access to information was addressed with improved logic.


Provide references for further information: Can you share references or external links related to CVE-2021-1862?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1862?


Explain the CVE ID: What does the identifier CVE-2021-1863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1863.

An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be able to place phone calls to any phone number.


Provide references for further information: Can you share references or external links related to CVE-2021-1863?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1863?


Explain the CVE ID: What does the identifier CVE-2021-1864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1864.

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. An attacker with JavaScript execution may be able to execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2021-1864?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1864?


Explain the CVE ID: What does the identifier CVE-2021-1865 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1865.

An issue obscuring passwords in screenshots was addressed with improved logic. This issue is fixed in iOS 14.5 and iPadOS 14.5. A user's password may be visible on screen.


Provide references for further information: Can you share references or external links related to CVE-2021-1865?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1865?


Explain the CVE ID: What does the identifier CVE-2021-1867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1867.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5, macOS Big Sur 11.3. A malicious application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1867?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1867?


Explain the CVE ID: What does the identifier CVE-2021-1868 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1868.

A logic issue was addressed with improved state management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. A local attacker may be able to elevate their privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1868?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1868?


Explain the CVE ID: What does the identifier CVE-2021-1870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1870.

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited..


Provide references for further information: Can you share references or external links related to CVE-2021-1870?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'name': 'FEDORA-2021-619711d709', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/'}, {'name': 'GLSA-202104-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202104-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1870?


Explain the CVE ID: What does the identifier CVE-2021-1871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1871.


Provide references for further information: Can you share references or external links related to CVE-2021-1871?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212147'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212146'}, {'name': 'FEDORA-2021-864dc37032', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/'}, {'name': 'DSA-4923', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2021/dsa-4923'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1871?


Explain the CVE ID: What does the identifier CVE-2021-1872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1872.

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled.


Provide references for further information: Can you share references or external links related to CVE-2021-1872?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1872?


Explain the CVE ID: What does the identifier CVE-2021-1873 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1873.

An API issue in Accessibility TCC permissions was addressed with improved state management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. A malicious application may be able to unexpectedly leak a user's credentials from secure text fields.


Provide references for further information: Can you share references or external links related to CVE-2021-1873?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1873?


Explain the CVE ID: What does the identifier CVE-2021-1874 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1874.

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5. An application may be able to execute arbitrary code with kernel privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1874?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1874?


Explain the CVE ID: What does the identifier CVE-2021-1875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1875.

A double free issue was addressed with improved memory management. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted file may lead to heap corruption.


Provide references for further information: Can you share references or external links related to CVE-2021-1875?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1875?


Explain the CVE ID: What does the identifier CVE-2021-1876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1876.

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. Processing maliciously crafted web content may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1876?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1876?


Explain the CVE ID: What does the identifier CVE-2021-1877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1877.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.5 and iPadOS 14.5. A local user may be able to read kernel memory.


Provide references for further information: Can you share references or external links related to CVE-2021-1877?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1877?


Explain the CVE ID: What does the identifier CVE-2021-1878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1878.

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.3, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave. An attacker in a privileged network position may be able to leak sensitive user information.


Provide references for further information: Can you share references or external links related to CVE-2021-1878?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1878?


Explain the CVE ID: What does the identifier CVE-2021-1879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1879.

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited..


Provide references for further information: Can you share references or external links related to CVE-2021-1879?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212256'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212257'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212258'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1879?


Explain the CVE ID: What does the identifier CVE-2021-1880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1880.

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.3, watchOS 7.4. Processing a maliciously crafted image may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1880?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1880?


Explain the CVE ID: What does the identifier CVE-2021-1881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1881.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. Processing a maliciously crafted font file may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1881?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1881?


Explain the CVE ID: What does the identifier CVE-2021-1882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1882.

A memory corruption issue was addressed with improved validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5, macOS Big Sur 11.3. An application may be able to gain elevated privileges.


Provide references for further information: Can you share references or external links related to CVE-2021-1882?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212326'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1882?


Explain the CVE ID: What does the identifier CVE-2021-1883 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1883.

This issue was addressed with improved checks. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. Processing maliciously crafted server messages may lead to heap corruption.


Provide references for further information: Can you share references or external links related to CVE-2021-1883?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212530'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212531'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1883?


Explain the CVE ID: What does the identifier CVE-2021-1884 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1884.

A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2021-1884?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1884?


Explain the CVE ID: What does the identifier CVE-2021-1885 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1885.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing a maliciously crafted image may lead to arbitrary code execution.


Provide references for further information: Can you share references or external links related to CVE-2021-1885?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212317'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212324'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.apple.com/en-us/HT212325'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1885?


Explain the CVE ID: What does the identifier CVE-2021-1886 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1886.

Incorrect handling of pointers in trusted application key import mechanism could cause memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1886?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1886?


Explain the CVE ID: What does the identifier CVE-2021-1887 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1887.

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1887?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1887?


Explain the CVE ID: What does the identifier CVE-2021-1888 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1888.

Memory corruption in key parsing and import function due to double freeing the same heap allocation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1888?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1888?


Explain the CVE ID: What does the identifier CVE-2021-1889 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1889.

Possible buffer overflow due to lack of length check in Trusted Application in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1889?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1889?


Explain the CVE ID: What does the identifier CVE-2021-1890 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1890.

Improper length check of public exponent in RSA import key function could cause memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1890?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1890?


Explain the CVE ID: What does the identifier CVE-2021-1891 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1891.

A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1891?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1891?


Explain the CVE ID: What does the identifier CVE-2021-1892 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1892.

Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1892?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1892?


Explain the CVE ID: What does the identifier CVE-2021-1894 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1894.

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1894?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1894?


Explain the CVE ID: What does the identifier CVE-2021-1895 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1895.

Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music


Provide references for further information: Can you share references or external links related to CVE-2021-1895?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1895?


Explain the CVE ID: What does the identifier CVE-2021-1896 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1896.

Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity


Provide references for further information: Can you share references or external links related to CVE-2021-1896?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1896?


Explain the CVE ID: What does the identifier CVE-2021-1897 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1897.

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1897?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1897?


Explain the CVE ID: What does the identifier CVE-2021-1898 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1898.

Possible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1898?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1898?


Explain the CVE ID: What does the identifier CVE-2021-1899 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1899.

Possible buffer over read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1899?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1899?


Explain the CVE ID: What does the identifier CVE-2021-1900 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1900.

Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1900?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1900?


Explain the CVE ID: What does the identifier CVE-2021-1901 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1901.

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1901?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1901?


Explain the CVE ID: What does the identifier CVE-2021-1903 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1903.

Possible denial of service scenario can occur due to lack of length check on Channel Switch Announcement IE in beacon or probe response frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1903?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1903?


Explain the CVE ID: What does the identifier CVE-2021-1904 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1904.

Child process can leak information from parent process due to numeric pids are getting compared and these pid can be reused in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1904?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1904?


Explain the CVE ID: What does the identifier CVE-2021-1905 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1905.

Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1905?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1905?


Explain the CVE ID: What does the identifier CVE-2021-1906 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1906.

Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1906?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1906?


Explain the CVE ID: What does the identifier CVE-2021-1907 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1907.

Possible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1907?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1907?


Explain the CVE ID: What does the identifier CVE-2021-1909 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1909.

Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1909?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1909?


Explain the CVE ID: What does the identifier CVE-2021-1910 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1910.

Double free in video due to lack of input buffer length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1910?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1910?


Explain the CVE ID: What does the identifier CVE-2021-1912 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1912.

Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1912?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1912?


Explain the CVE ID: What does the identifier CVE-2021-1913 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1913.

Possible integer overflow due to improper length check while updating grace period and count record in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1913?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1913?


Explain the CVE ID: What does the identifier CVE-2021-1914 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1914.

Loop with unreachable exit condition may occur due to improper handling of unsupported input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1914?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1914?


Explain the CVE ID: What does the identifier CVE-2021-1915 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1915.

Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1915?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1915?


Explain the CVE ID: What does the identifier CVE-2021-1916 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1916.

Possible buffer underflow due to lack of check for negative indices values when processing user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1916?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1916?


Explain the CVE ID: What does the identifier CVE-2021-1917 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1917.

Null pointer dereference can occur due to memory allocation failure in DIAG in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1917?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1917?


Explain the CVE ID: What does the identifier CVE-2021-1918 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1918.

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1918?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1918?


Explain the CVE ID: What does the identifier CVE-2021-1919 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1919.

Integer underflow can occur when the RTCP length is lesser than than the actual blocks present in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1919?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1919?


Explain the CVE ID: What does the identifier CVE-2021-1920 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1920.

Integer underflow can occur due to improper handling of incoming RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1920?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1920?


Explain the CVE ID: What does the identifier CVE-2021-1921 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1921.

Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1921?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1921?


Explain the CVE ID: What does the identifier CVE-2021-1923 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1923.

Incorrect pointer argument passed to trusted application TA could result in un-intended memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT


Provide references for further information: Can you share references or external links related to CVE-2021-1923?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1923?


Explain the CVE ID: What does the identifier CVE-2021-1924 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1924.

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1924?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1924?


Explain the CVE ID: What does the identifier CVE-2021-1925 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1925.

Possible denial of service scenario due to improper handling of group management action frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1925?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1925?


Explain the CVE ID: What does the identifier CVE-2021-1927 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1927.

Possible use after free due to lack of null check while memory is being freed in FastRPC driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1927?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1927?


Explain the CVE ID: What does the identifier CVE-2021-1928 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1928.

Buffer over read could occur due to incorrect check of buffer size while flashing emmc devices in Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1928?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1928?


Explain the CVE ID: What does the identifier CVE-2021-1929 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1929.

Lack of strict validation of bootmode can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1929?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1929?


Explain the CVE ID: What does the identifier CVE-2021-1930 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1930.

Possible out of bounds read due to incorrect validation of incoming buffer length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1930?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1930?


Explain the CVE ID: What does the identifier CVE-2021-1931 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1931.

Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music


Provide references for further information: Can you share references or external links related to CVE-2021-1931?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1931?


Explain the CVE ID: What does the identifier CVE-2021-1932 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1932.

Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1932?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1932?


Explain the CVE ID: What does the identifier CVE-2021-1933 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1933.

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1933?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1933?


Explain the CVE ID: What does the identifier CVE-2021-1934 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1934.

Possible memory corruption due to improper check when application loader object is explicitly destructed while application is unloading in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT


Provide references for further information: Can you share references or external links related to CVE-2021-1934?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1934?


Explain the CVE ID: What does the identifier CVE-2021-1935 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1935.

Possible null pointer dereference due to lack of validation check for passed pointer during key import in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1935?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1935?


Explain the CVE ID: What does the identifier CVE-2021-1936 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1936.

Null pointer dereference can occur due to lack of null check for user provided input in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1936?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1936?


Explain the CVE ID: What does the identifier CVE-2021-1937 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1937.

Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1937?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1937?


Explain the CVE ID: What does the identifier CVE-2021-1938 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1938.

Possible assertion due to improper verification while creating and deleting the peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1938?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1938?


Explain the CVE ID: What does the identifier CVE-2021-1939 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1939.

Null pointer dereference occurs due to improper validation when the preemption feature enablement is toggled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1939?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1939?


Explain the CVE ID: What does the identifier CVE-2021-1940 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1940.

Use after free can occur due to improper handling of response from firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1940?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1940?


Explain the CVE ID: What does the identifier CVE-2021-1941 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1941.

Possible buffer over read issue due to improper length check on WPA IE string sent by peer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1941?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1941?


Explain the CVE ID: What does the identifier CVE-2021-1942 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1942.

Improper handling of permissions of a shared memory region can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1942?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1942?


Explain the CVE ID: What does the identifier CVE-2021-1943 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1943.

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1943?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1943?


Explain the CVE ID: What does the identifier CVE-2021-1945 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1945.

Possible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1945?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1945?


Explain the CVE ID: What does the identifier CVE-2021-1946 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1946.

Null Pointer Dereference may occur due to improper validation while processing crafted SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile


Provide references for further information: Can you share references or external links related to CVE-2021-1946?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1946?


Explain the CVE ID: What does the identifier CVE-2021-1947 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1947.

Use-after-free vulnerability in kernel graphics driver because of storing an invalid pointer in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1947?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1947?


Explain the CVE ID: What does the identifier CVE-2021-1948 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1948.

Possible out of bound read due to lack of length check of data while parsing the beacon or probe response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1948?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1948?


Explain the CVE ID: What does the identifier CVE-2021-1949 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1949.

Possible integer overflow due to improper check of batch count value while sanitizer is enabled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1949?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1949?


Explain the CVE ID: What does the identifier CVE-2021-1950 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1950.

Improper cleaning of secure memory between authenticated users can lead to face authentication bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1950?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1950?


Explain the CVE ID: What does the identifier CVE-2021-1952 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1952.

Possible buffer over read occurs due to lack of length check of request buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music


Provide references for further information: Can you share references or external links related to CVE-2021-1952?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1952?


Explain the CVE ID: What does the identifier CVE-2021-1953 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1953.

Improper handling of received malformed FTMR request frame can lead to reachable assertion while responding with FTM1 frame in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1953?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1953?


Explain the CVE ID: What does the identifier CVE-2021-1954 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1954.

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking


Provide references for further information: Can you share references or external links related to CVE-2021-1954?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1954?


Explain the CVE ID: What does the identifier CVE-2021-1955 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1955.

Denial of service in SAP case due to improper handling of connections when association is rejected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables


Provide references for further information: Can you share references or external links related to CVE-2021-1955?


Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1955?