CVE-2025-24131

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An attacker in a privileged position may be able to perform a denial-of-service.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

05 Feb 2025, 16:15

Type Values Removed Values Added
CWE CWE-120

30 Jan 2025, 17:58

Type Values Removed Values Added
References () https://support.apple.com/en-us/122066 - () https://support.apple.com/en-us/122066 - Release Notes
References () https://support.apple.com/en-us/122068 - () https://support.apple.com/en-us/122068 - Release Notes
References () https://support.apple.com/en-us/122071 - () https://support.apple.com/en-us/122071 - Release Notes
References () https://support.apple.com/en-us/122072 - () https://support.apple.com/en-us/122072 - Release Notes
References () https://support.apple.com/en-us/122073 - () https://support.apple.com/en-us/122073 - Release Notes
CWE NVD-CWE-noinfo
First Time Apple tvos
Apple iphone Os
Apple ipados
Apple watchos
Apple visionos
Apple
Apple macos
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
Summary
  • (es) El problema se solucionó mejorando la gestión de la memoria. Este problema se solucionó en visionOS 2.3, iOS 18.3 y iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 y tvOS 18.3. Un atacante en una posición privilegiada podría realizar una denegación de servicio.
CPE cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-02-05 16:15


NVD link : CVE-2025-24131

Mitre link : CVE-2025-24131

CVE.ORG link : CVE-2025-24131


JSON object : View

Products Affected

apple

  • macos
  • visionos
  • ipados
  • watchos
  • tvos
  • iphone_os
CWE
NVD-CWE-noinfo CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')