CVE-2025-30440

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to bypass ASLR.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

03 Nov 2025, 20:18

Type Values Removed Values Added
References
  • () http://seclists.org/fulldisclosure/2025/May/7 -
  • () http://seclists.org/fulldisclosure/2025/May/9 -

27 May 2025, 21:30

Type Values Removed Values Added
First Time Apple macos
Apple
CPE cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
References () https://support.apple.com/en-us/122716 - () https://support.apple.com/en-us/122716 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122717 - () https://support.apple.com/en-us/122717 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/122718 - () https://support.apple.com/en-us/122718 - Release Notes, Vendor Advisory

14 May 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-863

13 May 2025, 19:35

Type Values Removed Values Added
Summary
  • (es) El problema se solucionó mejorando las comprobaciones. Este problema está corregido en macOS Ventura 13.7.6, macOS Sequoia 15.5 y macOS Sonoma 14.7.6. Es posible que una aplicación pueda omitir ASLR.

12 May 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-12 22:15

Updated : 2025-11-03 20:18


NVD link : CVE-2025-30440

Mitre link : CVE-2025-30440

CVE.ORG link : CVE-2025-30440


JSON object : View

Products Affected

apple

  • macos
CWE
CWE-863

Incorrect Authorization