CVE-2025-24085

Description

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

References

https://www.cisa.gov/news-events/alerts/2025/01/29/cisa-adds-one-known-exploited-vulnerability-catalog

https://www.securityweek.com/apple-patches-first-exploited-ios-zero-day-of-2025/

https://thehackernews.com/2025/01/apple-patches-actively-exploited-zero.html

https://www.forbes.com/sites/kateoflahertyuk/2025/01/27/ios-183-update-now-warning-issued-to-all-iphone-users/

https://www.darkreading.com/endpoint-security/apple-patches-actively-exploited-zero-day-vulnerability

https://www.bleepingcomputer.com/news/security/apple-fixes-this-years-first-actively-exploited-zero-day-bug/

https://support.apple.com/en-us/122073

https://support.apple.com/en-us/122072

https://support.apple.com/en-us/122071

https://support.apple.com/en-us/122068

https://support.apple.com/en-us/122066

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3