Type Confusion Vulnerability in Apple Products
CVE-2025-24129

7.5HIGH

Key Information:

Vendor
Apple
Status
Visionos
TV OS
Mac OS
Watch OS
Vendor
CVE Published:
27 January 2025

Summary

A type confusion vulnerability has been identified that could allow a remote attacker to cause unexpected termination of applications. This issue has been effectively addressed with improved validation checks in the latest versions of visionOS, iOS, iPadOS, macOS, watchOS, and tvOS. Users are encouraged to update their systems to mitigate potential risks associated with this vulnerability.

Affected Version(s)

iOS and iPadOS < 18.3

macOS < 15.3

tvOS < 18.3

References

https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122072
https://support.apple.com/en-us/122068

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.