An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.4 iOS 14.6 and iPadOS 14.6 watchOS 7.5 tvOS 14.6. Processing a maliciously crafted font file may lead to arbitrary code execution.