CVE-2021-1872 — MEDIUM (4.3)

Q: How severe is CVE-2021-1872?

CVE-2021-1872 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2021-1872?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Macos.

Vulnerability Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute being enabled.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Apple	Ipados	< 14.5
Apple	Iphone Os	< 14.5
Apple	Macos	>= 11.0, < 11.3

References

https://support.apple.com/en-us/HT212317Vendor Advisory
https://support.apple.com/en-us/HT212324Vendor Advisory
https://support.apple.com/en-us/HT212325Vendor Advisory
https://support.apple.com/en-us/HT212317Vendor Advisory
https://support.apple.com/en-us/HT212324Vendor Advisory
https://support.apple.com/en-us/HT212325Vendor Advisory

FAQ

What is CVE-2021-1872?

CVE-2021-1872 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A logic issue was addressed with improved state management. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4, macOS Big Sur 11.3. Muting a CallKit call while ringing may not result in mute...

How severe is CVE-2021-1872?

CVE-2021-1872 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-1872?

Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Macos.