CVEvulnerability
CVE-2025-31202
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.
Affected configurations
• apple ipados (< 18.4)
• apple iphone os (< 18.4)
• apple macos (< 15.4)
• apple tvos (< 18.4)
• apple visionos (< 2.4)
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://support.apple.com/en-us/122371 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122373 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122377 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122378 Release Notes, Vendor Advisory