CVEvulnerability
CVE-2025-24115
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-125
Description
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to read files outside of its sandbox.
Affected configurations
• apple macos (< 13.7.3)
• apple macos (>= 14.0 < 14.7.3)
• apple macos (>= 15.0 < 15.3)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/122068 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122069 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122070 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jan/15 seclists.org
- http://seclists.org/fulldisclosure/2025/Jan/16 seclists.org
- http://seclists.org/fulldisclosure/2025/Jan/17 seclists.org