About the security content of Security Update 2021-003 Catalina - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2020-36230A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_element, resulting in denial of service
• CVE-2020-36229A flaw was discovered in ldap_X509dn2bv in OpenLDAP before 2.4.57 leading to a slapd crash in the X.509 DN parsing in ad_keystring, resulting in denial of service
• CVE-2020-36228An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service
• CVE-2020-36227A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with the cancel_extop Cancel operation, resulting in denial of service
• CVE-2020-36226A flaw was discovered in OpenLDAP before 2.4.57 leading to a memch->bv_len miscalculation and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36225A flaw was discovered in OpenLDAP before 2.4.57 leading to a double free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36224A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service
• CVE-2020-36223A flaw was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Values Return Filter control handling, resulting in denial of service (double free and out-of-bounds read)
• CVE-2020-36222A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd in the saslAuthzTo validation, resulting in denial of service
• CVE-2020-36221Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Integer Underflow (Wrap or Wraparound)
• CVE-2020-29629An out-of-bounds read was addressed with improved input validation
• CVE-2021-30819An out-of-bounds read was addressed with improved input validation
• CVE-2021-30724A local attacker may be able to elevate their privileges
• CVE-2021-30743An out-of-bounds write was addressed with improved input validation
• CVE-2021-30728An out-of-bounds write issue was addressed with improved bounds checking
• CVE-2021-30746An out-of-bounds read was addressed with improved input validation
• CVE-2021-30694An information disclosure issue was addressed with improved state management
• CVE-2021-30725A memory corruption issue was addressed with improved state management
• CVE-2021-30739A local attacker may be able to elevate their privileges
• CVE-2021-30726A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30712A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30735A malicious application may be able to execute arbitrary code with kernel privileges
• CVE-2021-30671A validation issue was addressed with improved logic
• CVE-2021-30737A memory corruption issue in the ASN.1 decoder was addressed by removing the vulnerable code
• CVE-2021-30723An information disclosure issue was addressed with improved state management
• CVE-2021-30704A logic issue was addressed with improved state management
• CVE-2021-30721An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2021-30719An out-of-bounds read issue was addressed by removing the vulnerable code
• CVE-2021-30691An information disclosure issue was addressed with improved state management
• CVE-2021-30693A validation issue was addressed with improved logic
• CVE-2021-30695An out-of-bounds read was addressed with improved bounds checking
• CVE-2021-30684A remote attacker may cause an unexpected application termination or arbitrary code execution
• CVE-2021-30679This issue was addressed by removing the vulnerable code
• CVE-2021-30692An information disclosure issue was addressed with improved state management
• CVE-2021-30722An attacker in a privileged network position may be able to leak sensitive user information
• CVE-2021-30697A logic issue was addressed with improved state management
• CVE-2021-30681A validation issue existed in the handling of symlinks
• CVE-2021-30705This issue was addressed with improved checks
• CVE-2021-30716An attacker in a privileged network position may be able to perform denial of service
• CVE-2021-30688A malicious application may be able to break out of its sandbox
• CVE-2021-30717An attacker in a privileged network position may be able to execute arbitrary code
• CVE-2021-30715A logic issue was addressed with improved state management
• CVE-2021-30696An attacker in a privileged network position may be able to misrepresent application state
• CVE-2021-30710A memory corruption issue was addressed with improved state management
• CVE-2021-30673An access issue was addressed with improved access restrictions
• CVE-2021-30685This issue was addressed with improved checks
• CVE-2021-30708An out-of-bounds read was addressed with improved input validation
• CVE-2021-30678A remote attacker may be able to cause unexpected application termination or arbitrary code execution
• CVE-2021-30683A malicious application could execute arbitrary code leading to compromise of user information
• CVE-2021-30709This issue was addressed with improved checks

Source and provenance

Original title: About the security content of Security Update 2021-003 Catalina - Apple Support. Captured 16 Oct 2026, 03:33 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.