CVE-2025-24126

Published: Jan 27, 2025Modified: Apr 2, 2026

7.3

Vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Exploitability: 2.1 / Impact: 5.2

Source: NVD

Description

An input validation issue was addressed. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to corrupt process memory.

Affected (6)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Visionos, Watchos

6 products

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 18.3
Apple Iphone Os	Before 18.3
Apple Macos	Before 15.3
Apple Tvos	Before 18.3
Apple Visionos	Before 2.3
Apple Watchos	Before 11.3

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.