A race condition was addressed with improved locking. This issue is fixed in Security Update 2021-004 Mojave, iOS 14.5 and iPadOS 14.5, watchOS 7.4, Security Update 2021-003 Catalina, tvOS 14.5, macOS Big Sur 11.3. A remote attacker may be able to cause a denial of service.
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
| Link | Tags |
|---|---|
| https://support.apple.com/en-us/HT212317 | vendor advisory |
| https://support.apple.com/en-us/HT212323 | vendor advisory |
| https://support.apple.com/en-us/HT212324 | vendor advisory |
| https://support.apple.com/en-us/HT212530 | vendor advisory |
| https://support.apple.com/en-us/HT212325 | vendor advisory |
| https://support.apple.com/en-us/HT212531 | vendor advisory |