CVE-2021-30738

A malicious application may be able to overwrite arbitrary files. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Mojave. An issue with path validation logic for hardlinks was addressed with improved path sanitization.

• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212531Vendor Advisory
• https://support.apple.com/en-us/HT212529Vendor Advisory
• https://support.apple.com/en-us/HT212531Vendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30731This issue was addressed with improved checks. This issue is…5.5
• CVE-2021-30733An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2021-30734Multiple memory corruption issues were addressed with improv…8.8
• CVE-2021-30735A malicious application may be able to execute arbitrary cod…7.8
• CVE-2021-30736A buffer overflow was addressed with improved size validatio…7.8
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed…8.8
• CVE-2021-30739A local attacker may be able to elevate their privileges. Th…7.8
• CVE-2021-30740A logic issue was addressed with improved validation. This i…7.8
• CVE-2021-30741A use after free issue was addressed with improved memory ma…7.1
• CVE-2021-30742A memory consumption issue was addressed with improved memor…7.8
• CVE-2021-30743An out-of-bounds write was addressed with improved input val…7.8
• CVE-2021-30744Description: A cross-origin issue with iframe elements was a…6.1