Vulnerability in Apple macOS
CVE-2021-40832
A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the AVRDL unpacking module component used in certain F-Secure products can crash while scanning a fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service (DoS) of the Anti-Virus engine.
EPSS: 0.006 (45.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L.
Affected products
- Apple Macos
- F-secure Atlant
- F-secure Cloud_protection_for_salesforce
- F-secure Elements_endpoint_detection_and_response
- F-secure Elements_endpoint_protection
- F-secure Elements_for_microsoft_365
- F-secure Endpoint Protection Products On Windows And Mac. Linux Security (32-bit) 64 Atlant Cloud For Salesforce Microsoft Office 365 — versions All Version
- F-secure Internet_gatekeeper
- F-secure Linux_security
- Microsoft Windows
References
- cve-notifications-us@f-secure.com (x_refsource_MISC, Vendor Advisory)
- cve-notifications-us@f-secure.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-40832?
- CVE-2021-40832 is a medium-severity vulnerability in Apple macOS. CVSS score: 5.5/10. Published 2021-10-08.
- How severe is CVE-2021-40832?
- Medium severity. CVSS v3 base score is 5.5 out of 10.