CVE-2021-30733

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Security Update 2021-004 Catalina, Security Update 2021-005 Mojave, macOS Big Sur 11.4, watchOS 7.5. Processing a maliciously crafted font may result in the disclosure of process memory.

• CWE-125

• https://support.apple.com/en-us/HT212528Vendor Advisory
• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212532Vendor Advisory
• https://support.apple.com/en-us/HT212533Vendor Advisory
• https://support.apple.com/en-us/HT212600Vendor Advisory
• https://support.apple.com/en-us/HT212603Vendor Advisory
• https://support.apple.com/en-us/HT212528Vendor Advisory
• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212532Vendor Advisory
• https://support.apple.com/en-us/HT212533Vendor Advisory
• https://support.apple.com/en-us/HT212600Vendor Advisory
• https://support.apple.com/en-us/HT212603Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30725A memory corruption issue was addressed with improved state …7.8
• CVE-2021-30726A malicious application may be able to execute arbitrary cod…7.8
• CVE-2021-30727A logic issue was addressed with improved state management. …5.5
• CVE-2021-30728An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2021-30729A logic issue was addressed with improved restrictions. This…7.5
• CVE-2021-30731This issue was addressed with improved checks. This issue is…5.5
• CVE-2021-30734Multiple memory corruption issues were addressed with improv…8.8
• CVE-2021-30735A malicious application may be able to execute arbitrary cod…7.8
• CVE-2021-30736A buffer overflow was addressed with improved size validatio…7.8
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed…8.8
• CVE-2021-30738A malicious application may be able to overwrite arbitrary f…5.5
• CVE-2021-30739A local attacker may be able to elevate their privileges. Th…7.8