Apple Multiple Products Integer Overflow or Wraparound Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2021-30952 · Published 24/08/2021 · updated 17/06/2026

Apple Multiple Products Integer Overflow or Wraparound Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 05/03/2026. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
safari apple	`< 15.2`	`15.2`
webkitgtk webkitgtk	`< 2.34.4`	`2.34.4`
wpe webkit wpewebkit	`< 2.34.4`	`2.34.4`

Description

An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing maliciously crafted web content may lead to arbitrary code execution.

References

openwall.com/lists/oss-security/2022/01/21/2 · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7EQVZ3CEMTINLBZ7PBC7WRXVEVCRHNSM · Broken Link
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HQKWD4BXRDD2YGR5AVU7H5J5PIQIEU6V · Broken Link
support.apple.com/en-us/HT212975 · Release Notes
support.apple.com/en-us/HT212976 · Release Notes
support.apple.com/en-us/HT212978 · Release Notes
support.apple.com/en-us/HT212980 · Release Notes
support.apple.com/en-us/HT212982 · Release Notes
debian.org/security/2022/dsa-5060 · Mailing List
debian.org/security/2022/dsa-5061 · Mailing List
cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2021-30952

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free