CVEvulnerability
CVE-2025-24225
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2025-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-79
Description
An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing.
Affected configurations
• apple ipados (< 17.7.7)
• apple ipados (>= 18.0 < 18.5)
• apple iphone os (< 18.5)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://support.apple.com/en-us/122404 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122405 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/May/6 seclists.org