Paper/Archive/CVE-2025-31200

CVE-2025-31200

Apple iOS and iPadOS — Apple Multiple Products Memory Corruption Vulnerability

KEV · due 8 May EPSS 21%public exploit SSVC act CVSS 9.8

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 In CISA KEV+3030.0 EPSS percentile 97.5.976 × 2019.5 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

Affected

ProductAffectedFixed inSource

iOS and iPadOS< 18.4.118.4.1CNA

macOS< 15.4.115.4.1CNA

tvOS< 18.4.118.4.1CNA

visionOS< 2.4.12.4.1CNA

watchOS< 11.511.5CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/122282 refsupport.apple.com/en-us/122400 refsupport.apple.com/en-us/122401 refsupport.apple.com/en-us/122402 refsupport.apple.com/en-us/122722 refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200 writeupgithub.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md refgithub.com/cisagov/vulnrichment/issues/200 refblog.noahhw.dev/posts/cve-2025-31200 refnews.ycombinator.com/item?id=44161894 refseclists.org/fulldisclosure/2025/Oct/4 refseclists.org/fulldisclosure/2025/Oct/0 refseclists.org/fulldisclosure/2025/Jun/14 refseclists.org/fulldisclosure/2025/May/10 refseclists.org/fulldisclosure/2025/Apr/26 kevcisa.gov/known-exploited-vulnerabilities-catalog