Type Confusion Vulnerability in Apple Operating Systems
CVE-2025-24137

8HIGH

Key Information:

Vendor
Apple
Status
Mac OS
Visionos
TV OS
iPad OS
Vendor
CVE Published:
27 January 2025

Summary

A type confusion vulnerability in Apple's operating systems allows remote attackers to exploit specific application flaws. Through this vulnerability, an attacker may induce unexpected application termination or execute arbitrary code. Apple has implemented improved validation measures to address this issue across various OS versions, enhancing the overall security posture.

Affected Version(s)

iOS and iPadOS < 18.3

iPadOS < 17.7

macOS < 14.7

References

https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122072

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.