• Stephen Parsons

Apple fixed zero-day vulnerability in IOMobileFrameBuffer kernel extension (CVE-2021-30807)

Description


Apple resolved zero-day vulnerability in IOMobileFrameBuffer kernel extension (CVE-2021-30807). The vulnerability is due to the memory corruption issue in the IOMobileFramebuffer kernel extension which could allow a threat actor to perform arbitrary code execution with kernel privileges on vulnerable apple devices.


Recommendation

It is recommended to update the iOS, iPadOS and macOS Big Sur to their latest available versions. The iOS 14.7.1 and iPadOS 14.7.1 update fixes a critical security issue dubbed CVE-2021-30807 as per the security notes


Reference

  • https://support.apple.com/en-us/HT212623

  • https://support.apple.com/en-us/HT212622

  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30807




0 views0 comments