CVEvulnerability
CVE-2025-24256
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-125
Description
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to disclose kernel memory.
Affected configurations
• apple macos (>= 13.0 < 13.7.5)
• apple macos (>= 14.0 < 14.7.5)
• apple macos (>= 15.0 < 15.4)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/122373 Vendor Advisory
- https://support.apple.com/en-us/122374 Vendor Advisory
- https://support.apple.com/en-us/122375 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/10 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/9 seclists.org