Integer Overflow Vulnerability in macOS Products by Apple
CVE-2025-24156

7.8HIGH

Key Information:

Vendor
Apple
Status
Mac OS
Vendor
CVE Published:
27 January 2025

Summary

An integer overflow vulnerability has been identified in Apple's macOS, which could potentially allow an application to elevate user privileges. This issue arises from insufficient input validation, making it critical for users to update their systems to the patched versions. Users are strongly advised to upgrade to macOS Ventura 13.7.3, macOS Sequoia 15.3, or macOS Sonoma 14.7.3 to mitigate this risk.

Affected Version(s)

macOS < 14.7

macOS < 15.3

macOS < 13.7

References

https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122070

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.