CVE-2025-24131

T

he issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An attacker in a privileged position may be able to perform a denial-of-service.

Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

03 Nov 2025, 21:19

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2025/Jan/13 -
  • () http://seclists.org/fulldisclosure/2025/Jan/15 -
  • () http://seclists.org/fulldisclosure/2025/Jan/18 -
  • () http://seclists.org/fulldisclosure/2025/Jan/19 -

05 Feb 2025, 16:15

Type Values Removed Values Added
CWE CWE-120

30 Jan 2025, 17:58

Type Values Removed Values Added
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Summary
  • (es) El problema se solucionó mejorando la gestión de la memoria. Este problema se solucionó en visionOS 2.3, iOS 18.3 y iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 y tvOS 18.3. Un atacante en una posición privilegiada podría realizar una denegación de servicio.
References () https://support.apple.com/en-us/122066 - () https://support.apple.com/en-us/122066 - Release Notes
References () https://support.apple.com/en-us/122068 - () https://support.apple.com/en-us/122068 - Release Notes
References () https://support.apple.com/en-us/122071 - () https://support.apple.com/en-us/122071 - Release Notes
References () https://support.apple.com/en-us/122072 - () https://support.apple.com/en-us/122072 - Release Notes
References () https://support.apple.com/en-us/122073 - () https://support.apple.com/en-us/122073 - Release Notes
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CWE NVD-CWE-noinfo
First Time Apple tvos
Apple iphone Os
Apple ipados
Apple watchos
Apple visionos
Apple
Apple macos

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-11-03 21:19


NVD link : CVE-2025-24131

Mitre link : CVE-2025-24131

CVE.ORG link : CVE-2025-24131


JSON object : View

CWE
NVD-CWE-noinfo CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')