CVE-2021-1794: Apple Ipad OS

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution.

Affected products

• Apple Ipad OS: before 14.4 (fixed in 14.4)
• Apple iPhone OS: before 14.4 (fixed in 14.4)

Published 2021-04-02. Last modified 2026-06-17.