Logic Issue in Apple Products Leading to Potential Service Disruption
CVE-2025-31226

5.5MEDIUM

Key Information:

Vendor

Apple
Status
TV OS
Mac OS
iPad OS
iOS And iPad OS
Vendor
CVE Published:
12 May 2025

What is CVE-2025-31226?

This vulnerability involves a logic issue within various Apple operating systems, which, if exploited, allows for the processing of a maliciously crafted image. This can result in service disruptions, potentially impacting users by causing a denial of service. Apple has addressed this issue through enhanced validation and checks in system updates across several devices, ensuring improved security for users.

Affected Version(s)

iOS and iPadOS < 18.5

iPadOS < 17.7

macOS < 15.5

References

https://support.apple.com/en-us/122720
https://support.apple.com/en-us/122716
https://support.apple.com/en-us/122405

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-31226 : Logic Issue in Apple Products Leading to Potential Service Disruption