An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
{
"unresolved_ranges": [
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "4.04"
}
],
"cpe": "cpe:2.3:a:xpdfreader:xpdf:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "14.8"
}
],
"cpe": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "12.5.5"
},
{
"introduced": "13.0"
},
{
"fixed": "14.8"
}
],
"cpe": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "10.15"
},
{
"fixed": "10.15.7"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-NA"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020\\-001"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2020"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-001"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-002"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-002:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-003"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-003:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"last_affected": "10.15.7-security_update_2021\\-004"
}
],
"cpe": "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-004:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "11.6"
}
],
"cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
},
{
"source": "CPE_FIELD",
"extracted_events": [
{
"fixed": "7.6.2"
}
],
"cpe": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*"
}
]
}{
"source": "CPE_FIELD",
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "22.09.0"
}
],
"cpe": "cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*"
}