by Kastro
Paper/Archive/CVE-2025-24273

CVE-2025-24273

Apple macOS — An out-of-bounds write issue was addressed with improved bounds checking.

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 61.8.618 × 2012.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.

Affected

ProductAffectedFixed inSource
macOS< 13.7.513.7.5CNA
macOS< 14.7.514.7.5CNA
macOS< 15.415.4CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/122373refsupport.apple.com/en-us/122374refsupport.apple.com/en-us/122375refseclists.org/fulldisclosure/2025/Apr/10refseclists.org/fulldisclosure/2025/Apr/9refseclists.org/fulldisclosure/2025/Apr/8