CVE-2021-30710: 
macOS vulnerability analysis and mitigation

A memory corruption vulnerability (CVE-2021-30710) was discovered in Apple's Heimdal component affecting multiple Apple operating systems including tvOS 14.6, iOS 14.6, iPadOS 14.6, macOS Big Sur 11.4, Security Update 2021-004 Mojave, Security Update 2021-003 Catalina, and watchOS 7.5. The vulnerability was discovered by security researcher Gabe Kirkpatrick (@gabe_k) and was fixed in updates released on May 24, 2021 (Apple Support).

The vulnerability stems from a memory corruption issue in the Heimdal component. The issue was addressed by Apple through improved state management. The vulnerability has been assigned a CVSS v3.1 base score of 7.1 HIGH with vector CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H (NVD).

When exploited, this vulnerability could allow a malicious application to cause a denial of service condition or potentially disclose memory contents. This could lead to system instability and exposure of sensitive information stored in memory (Apple Support).

The vulnerability requires local access and user interaction to be exploited. A malicious application running on the affected system could trigger the vulnerability to cause system disruption or memory disclosure (NVD).

Apple has addressed this vulnerability in the following updates: tvOS 14.6, iOS 14.6 and iPadOS 14.6, macOS Big Sur 11.4, Security Update 2021-004 Mojave, Security Update 2021-003 Catalina, and watchOS 7.5. Users are advised to update their devices to these versions to protect against this vulnerability (Apple Support).