=====================================================================

                             CERT-Renater

                 Note d'Information No. 2021/VULN459
_____________________________________________________________________

DATE                : 14/09/2021

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): iOS, iPadOS versions prior to 14.8.

=====================================================================
https://support.apple.com/en-us/HT212807
_____________________________________________________________________


iOS 14.8 and iPadOS 14.8

Released September 13, 2021


CoreGraphics

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2
and later, iPad 5th generation and later, iPad mini 4 and later, and
iPod touch (7th generation)

Impact: Processing a maliciously crafted PDF may lead to arbitrary code
execution. Apple is aware of a report that this issue may have been
actively exploited.

Description: An integer overflow was addressed with improved input
validation.

CVE-2021-30860: The Citizen Lab


WebKit

Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2
and later, iPad 5th generation and later, iPad mini 4 and later, and
iPod touch (7th generation)

Impact: Processing maliciously crafted web content may lead to arbitrary
code execution. Apple is aware of a report that this issue may have been
actively exploited.

Description: A use after free issue was addressed with improved memory
management.

CVE-2021-30858: an anonymous researcher


Information about products not manufactured by Apple, or independent
websites not controlled or tested by Apple, is provided without
recommendation or endorsement. Apple assumes no responsibility with
regard to the selection, performance, or use of third-party websites or
products. Apple makes no representations regarding third-party website
accuracy or reliability. Contact the vendor for additional information.


Published Date: September 13, 2021


=========================================================
+ CERT-RENATER       |    tel : 01-53-94-20-44          +
+ 23/25 Rue Daviel   |    fax : 01-53-94-20-41          +
+ 75013 Paris        |    email:cert@support.renater.fr +
=========================================================