Memory Initialization Issue in Apple macOS Products
CVE-2025-24235

5.5MEDIUM

Key Information:

Vendor
Apple
Status
Vendor
CVE Published:
31 March 2025

Summary

A vulnerability concerning improper memory initialization has been identified in Apple’s macOS products. This flaw could enable a remote attacker to exploit the system, potentially leading to unexpected application terminations or heap corruption. It highlights the importance of timely updates and vulnerability management for all macOS users. The issue has been resolved in recent updates, specifically macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5.

Affected Version(s)

macOS < 15.4

macOS < 14.7

macOS < 13.7

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
🍪 This website uses cookies, like every other website on the internet 😕 By using our website, you consent to the use of cookies.