Apple Multiple Products IOMobileFrameBuffer Memory Corruption Vulnerability Allowing Arbitrary Code Execution with Kernel Privileges

A memory corruption vulnerability has been identified in the IOMobileFrameBuffer component of multiple Apple operating systems, including macOS Big Sur, iOS, iPadOS, and watchOS. This vulnerability may allow an application to execute arbitrary code with kernel privileges. Apple is aware of reports suggesting that this issue may have been actively exploited.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution with kernel privileges, allowing an application to execute code at the highest level of system access.

Remediation

Users can update to macOS Big Sur 11.5.1, iOS 14.7.1, iPadOS 14.7.1, or watchOS 7.6.1 to address this vulnerability.