CVEvulnerability
CVE-2025-24257
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2025-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- Weaknesses
- CWE-787
Description
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination or write kernel memory.
Affected configurations
• apple ipados (< 18.4)
• apple iphone os (< 18.4)
• apple macos (>= 15.0 < 15.4)
• apple visionos (< 2.4)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/122371 Vendor Advisory
- https://support.apple.com/en-us/122373 Vendor Advisory
- https://support.apple.com/en-us/122376 support.apple.com
- https://support.apple.com/en-us/122378 Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Apr/12 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/13 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/4 seclists.org
- http://seclists.org/fulldisclosure/2025/Apr/8 seclists.org