CVEvulnerability
CVE-2025-24194
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Description
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may result in the disclosure of process memory.
Affected configurations
• apple ipados (< 18.4)
• apple iphone os (< 18.4)
• apple macos (>= 15.0 < 15.4)
• apple tvos (< 18.4)
• apple visionos (< 2.4)
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122373 Vendor Advisory
- https://support.apple.com/en-us/122376 support.apple.com
- https://support.apple.com/en-us/122377 Vendor Advisory
- https://support.apple.com/en-us/122378 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/11 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/12 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/13 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org