- Vendor / Project
- Apple
- Product
- Multiple Products
- Date added
- Nov 3, 2021
- Due date
- Nov 17, 2021
- Known ransomware use
- Unknown
- CWEs
- CWE-20, CWE-190
Description
Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.
Required action
Apply updates per vendor instructions.