CVE-2021-1758: 
macOS vulnerability analysis and mitigation

CVE-2021-1758 is an out-of-bounds read vulnerability discovered in Apple's FontParser component. The vulnerability was disclosed and patched in January 2021, affecting multiple Apple operating systems including macOS Big Sur, iOS 14.4, iPadOS 14.4, watchOS 7.3, and tvOS 14.4. The vulnerability was discovered by Peter Nguyen of STAR Labs (Apple Security).

The vulnerability is characterized as an out-of-bounds read issue in the FontParser component that was addressed with improved bounds checking. The vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If exploited, this vulnerability could allow a remote attacker to cause arbitrary code execution. The vulnerability affects the processing of maliciously crafted fonts, which could lead to unauthorized access and potential system compromise (Apple Security).

Apple has released security updates to address this vulnerability in multiple operating systems: macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Users are advised to update their devices to these versions to mitigate the vulnerability (Apple Security).