About the security content of iOS 14.7 and iPadOS 14.7 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2021-3518There's a flaw in libxml2 in versions before 2.9.11
• CVE-2018-25014A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
• CVE-2018-25010A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter()
• CVE-2018-25011A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
• CVE-2020-36330A flaw was found in libwebp in versions before 1.0.1
• CVE-2020-36331A flaw was found in libwebp in versions before 1.0.1
• CVE-2020-36328A flaw was found in libwebp in versions before 1.0.1
• CVE-2020-36329A flaw was found in libwebp in versions before 1.0.1
• CVE-2021-30871A local attacker may be able to access analytics data
• CVE-2021-30804A permissions issue was addressed with improved validation
• CVE-2021-30786A race condition was addressed with improved state handling
• CVE-2021-30780An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2021-30776A logic issue was addressed with improved validation
• CVE-2021-30773A malicious application may be able to bypass code signing checks
• CVE-2021-30798A malicious application may be able to bypass certain Privacy preferences
• CVE-2021-30799Multiple memory corruption issues were addressed with improved memory handling
• CVE-2021-30789An out-of-bounds read was addressed with improved input validation
• CVE-2021-30791An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30797This issue was addressed with improved checks
• CVE-2021-30802A use after free issue was addressed with improved memory management
• CVE-2021-30759A stack overflow was addressed with improved input validation
• CVE-2021-30781A local attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30774A logic issue was addressed with improved validation
• CVE-2021-30785A buffer overflow was addressed with improved bounds checking
• CVE-2021-30770An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations
• CVE-2021-30795A use after free issue was addressed with improved memory management
• CVE-2021-30788This issue was addressed with improved checks
• CVE-2021-30800This issue was addressed with improved checks
• CVE-2021-30796A logic issue was addressed with improved validation
• CVE-2021-30748A memory corruption issue was addressed with improved state management
• CVE-2021-30763A shortcut may be able to bypass Internet permission requirements
• CVE-2021-30758A type confusion issue was addressed with improved state handling
• CVE-2021-30760An integer overflow was addressed through improved input validation
• CVE-2021-30779This issue was addressed with improved checks
• CVE-2021-30769A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication
• CVE-2021-30768A logic issue was addressed with improved validation
• CVE-2021-30775A memory corruption issue was addressed with improved state management
• CVE-2021-30792An out-of-bounds write was addressed with improved input validation

Source and provenance

Original title: About the security content of iOS 14.7 and iPadOS 14.7 - Apple Support. Captured 16 Oct 2026, 03:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.