Type Confusion Vulnerability in Apple Operating Systems
CVE-2025-24137

8HIGH

Key Information:

Vendor

Apple
Status
Mac OS
Visionos
TV OS
iPad OS
Vendor
CVE Published:
27 January 2025

What is CVE-2025-24137?

A type confusion vulnerability in Apple's operating systems allows remote attackers to exploit specific application flaws. Through this vulnerability, an attacker may induce unexpected application termination or execute arbitrary code. Apple has implemented improved validation measures to address this issue across various OS versions, enhancing the overall security posture.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

iOS and iPadOS < 18.3

iPadOS < 17.7

macOS < 14.7

References

https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122073
https://support.apple.com/en-us/122072

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.