CVE-2021-30665: 
Rocky Linux vulnerability analysis and mitigation

CVE-2021-30665 is a memory corruption vulnerability in WebKit that affects multiple Apple products including iOS, iPadOS, macOS Big Sur, watchOS, and tvOS. The vulnerability was discovered by researchers yangkang, zerokeeper, and bianliang of 360 ATA and was disclosed in May 2021. The issue affects various Apple devices including iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation) (Apple Advisory).

The vulnerability is a memory corruption issue in WebKit, Apple's browser engine. The flaw was addressed with improved state management. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-787 (Out-of-bounds Write) (NVD).

Processing maliciously crafted web content may lead to arbitrary code execution on affected devices. The vulnerability allows attackers to potentially execute arbitrary code on target systems when users process specially crafted web content (Apple Advisory, Hacker News).

Apple released security updates to address this vulnerability in multiple products: iOS 14.5.1, iPadOS 14.5.1, macOS Big Sur 11.3.1, watchOS 7.4.1, tvOS 14.6, and iOS 12.5.3. Users are strongly recommended to update their devices to these versions or later to mitigate the risk (Apple Advisory, Hacker News).

The vulnerability received significant attention due to its active exploitation in the wild and its impact on multiple Apple products. Apple's quick response in releasing patches across their product line demonstrated the severity of the issue (Hacker News).