CVE-2021-1792: 
macOS vulnerability analysis and mitigation

CVE-2021-1792 is an out-of-bounds read vulnerability discovered in Apple's CoreText component. The vulnerability was disclosed and patched in January 2021, affecting multiple Apple operating systems including macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4 (Apple Support).

The vulnerability is classified as an out-of-bounds read issue in the CoreText component that was addressed by Apple through improved bounds checking. The vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

When exploited, this vulnerability could allow a remote attacker to cause arbitrary code execution on affected systems. The out-of-bounds read condition could potentially lead to information disclosure or system compromise (Apple Support).

The vulnerability requires user interaction and can be exploited remotely. The attack complexity is considered low, requiring no privileges for exploitation (NVD).

Apple addressed this vulnerability by implementing improved bounds checking in the affected systems. Users should update to macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 or iPadOS 14.4 depending on their device (Apple Support).