CVE-2025-24131

The issue was addressed with improved memory handling. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. An attacker in a privileged position may be able to perform a denial-of-service.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

05 Feb 2025, 16:15

Type Values Removed Values Added
CWE CWE-120

30 Jan 2025, 17:58

Type Values Removed Values Added
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
First Time Apple watchos
Apple
Apple visionos
Apple ipados
Apple macos
Apple tvos
Apple iphone Os
References () https://support.apple.com/en-us/122066 - () https://support.apple.com/en-us/122066 - Release Notes
References () https://support.apple.com/en-us/122068 - () https://support.apple.com/en-us/122068 - Release Notes
References () https://support.apple.com/en-us/122071 - () https://support.apple.com/en-us/122071 - Release Notes
References () https://support.apple.com/en-us/122072 - () https://support.apple.com/en-us/122072 - Release Notes
References () https://support.apple.com/en-us/122073 - () https://support.apple.com/en-us/122073 - Release Notes
Summary
  • (es) El problema se solucionó mejorando la gestión de la memoria. Este problema se solucionó en visionOS 2.3, iOS 18.3 y iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3 y tvOS 18.3. Un atacante en una posición privilegiada podría realizar una denegación de servicio.
CWE NVD-CWE-noinfo

27 Jan 2025, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-27 22:15

Updated : 2025-02-05 16:15


NVD link : CVE-2025-24131

Mitre link : CVE-2025-24131

CVE.ORG link : CVE-2025-24131


JSON object : View

Products Affected

apple

  • macos
  • iphone_os
  • watchos
  • visionos
  • ipados
  • tvos
CWE
NVD-CWE-noinfo CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')