by Kastro
Paper/Archive/CVE-2025-24230

CVE-2025-24230

Apple iOS and iPadOS — An out-of-bounds read issue was addressed with improved input validation.

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 79.9.799 × 2016.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. Playing a malicious audio file may lead to an unexpected app termination.

Affected

ProductAffectedFixed inSource
iOS and iPadOS< 18.418.4CNA
iPadOS< 17.7.617.7.6CNA
macOS< 13.7.513.7.5CNA
macOS< 14.7.514.7.5CNA
macOS< 15.415.4CNA
tvOS< 18.418.4CNA
visionOS< 2.42.4CNA
watchOS< 11.411.4CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/122371refsupport.apple.com/en-us/122372refsupport.apple.com/en-us/122373refsupport.apple.com/en-us/122374refsupport.apple.com/en-us/122375refsupport.apple.com/en-us/122376refsupport.apple.com/en-us/122377refsupport.apple.com/en-us/122378refseclists.org/fulldisclosure/2025/Apr/13refseclists.org/fulldisclosure/2025/Apr/10refseclists.org/fulldisclosure/2025/Apr/9refseclists.org/fulldisclosure/2025/Apr/8refseclists.org/fulldisclosure/2025/Apr/5refseclists.org/fulldisclosure/2025/Apr/4refseclists.org/fulldisclosure/2025/Apr/12refseclists.org/fulldisclosure/2025/Apr/11