CVE-2021-30685

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. Parsing a maliciously crafted audio file may lead to disclosure of user information.

• https://support.apple.com/en-us/HT212528Vendor Advisory
• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212530Vendor Advisory
• https://support.apple.com/en-us/HT212532Vendor Advisory
• https://support.apple.com/en-us/HT212533Vendor Advisory
• https://support.apple.com/en-us/HT212528Vendor Advisory
• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212530Vendor Advisory
• https://support.apple.com/en-us/HT212532Vendor Advisory
• https://support.apple.com/en-us/HT212533Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30679This issue was addressed by removing the vulnerable code. Th…7.8
• CVE-2021-30680A logic issue was addressed with improved state management. …7.8
• CVE-2021-30681A validation issue existed in the handling of symlinks. This…7.8
• CVE-2021-30682A logic issue was addressed with improved restrictions. This…5.5
• CVE-2021-30683A use after free issue was addressed with improved memory ma…7.8
• CVE-2021-30684A logic issue was addressed with improved state management. …7.8
• CVE-2021-30686An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2021-30687An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2021-30688A malicious application may be able to break out of its sand…8.8
• CVE-2021-30689A logic issue was addressed with improved state management. …6.1
• CVE-2021-30690Multiple issues in apache were addressed by updating apache …9.8
• CVE-2021-30691An information disclosure issue was addressed with improved …5.5