Parsing Vulnerability in macOS Products by Apple

CVE-2025-31248

What is CVE-2025-31248?

A vulnerability has been identified that involves improper parsing of directory paths in macOS systems. This flaw can permit an application to gain unauthorized access to sensitive user data, posing significant privacy risks. Apple has addressed this issue by implementing enhanced path validation, reducing the likelihood of exploitation in macOS Ventura 13.7.3, macOS Sequoia 15.5, and macOS Sonoma 14.7.3.

References