CVE-2025-24154

critical

Description

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory.

References

https://support.apple.com/en-us/122073

https://support.apple.com/en-us/122070

https://support.apple.com/en-us/122069

https://support.apple.com/en-us/122068

https://support.apple.com/en-us/122066

Details

Source: Mitre, NVD

Published: 2025-01-27

Updated: 2025-01-28

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical