CVE-2021-1774: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iP...

Summary

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

What to do

Update apple ipados to version 14.4 or later.
Update apple iphone_os to version 14.4 or later.
Update apple macos to version 11.2 or later.
Update apple tvos to version 14.4 or later.
Update apple watchos to version 7.3 or later.

Affected software

Vendor	Product	Affected versions
apple	ipados	< 14.4 `cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	< 14.4 `cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	>= 10.14, < 10.14.6 >= 10.15, < 10.15.7 10.14.6 10.15.7 `cpe:2.3:o:apple:mac_os_x::::::::`
apple	macos	>= 11.0, < 11.2 `cpe:2.3:o:apple:macos::::::::`
apple	tvos	< 14.4 `cpe:2.3:o:apple:tvos::::::::`
apple	watchos	< 7.3 `cpe:2.3:o:apple:watchos::::::::`

Original advisory text

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iP...

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution.

References

https://support.apple.com/en-us/HT212146 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212147 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212148 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT212149 Release Notes Vendor Advisory