Paper/Archive/CVE-2025-31281

CVE-2025-31281

Apple iOS and iPadOS — An input validation issue was addressed with improved memory handling.

CVSS 9.1 (ADP)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 70.1.701 × 2014.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6. Processing a maliciously crafted file may lead to unexpected app termination.

Affected

ProductAffectedFixed inSource

iOS and iPadOS< 18.618.6CNA

macOS< 15.615.6CNA

tvOS< 18.618.6CNA

visionOS< 2.62.6CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.apple.com/en-us/124147 refsupport.apple.com/en-us/124149 refsupport.apple.com/en-us/124153 refsupport.apple.com/en-us/124154 refseclists.org/fulldisclosure/2025/Jul/37 refseclists.org/fulldisclosure/2025/Jul/36 refseclists.org/fulldisclosure/2025/Jul/32 refseclists.org/fulldisclosure/2025/Jul/30