CVE-2021-30902

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.8.1 and iPadOS 14.8.1, iOS 15.1 and iPadOS 15.1. A local attacker may be able to cause unexpected application termination or arbitrary code execution.

• CWE-416

• https://support.apple.com/en-us/HT212867
• https://support.apple.com/en-us/HT212868
• https://support.apple.com/en-us/HT212867
• https://support.apple.com/en-us/HT212868

Published

Aug 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30897An issue existed in the specification for the resource timin…6.5
• CVE-2021-30898An access issue was addressed with additional sandbox restri…5.5
• CVE-2021-30899A race condition was addressed with improved state handling.…7
• CVE-2021-3090Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-30900An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2021-30901Multiple out-of-bounds write issues were addressed with impr…7.8
• CVE-2021-30903This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-30904A sync issue was addressed with improved state validation. T…5.3
• CVE-2021-30905An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2021-30906This issue was addressed with improved checks. This issue is…7.8
• CVE-2021-30907An integer overflow was addressed through improved input val…7.8
• CVE-2021-30908An authentication issue was addressed with improved state ma…3.3