PT-2025-1300 · Apple · Tvos +5

Pattern-F

·

Published

2025-01-27

·

Updated

2025-09-12

·

CVE-2025-24085

CVSS v3.1
7.3
VectorAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions:

Apple Multiple Products versions prior to visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3

Description:

A use-after-free issue was addressed with improved memory management. This issue may have been actively exploited against versions of iOS before iOS 17.2. A malicious application may be able to elevate privileges.

Recommendations:

visionOS versions prior to 2.3: Update to visionOS 2.3

iOS versions prior to 18.3: Update to iOS 18.3

iPadOS versions prior to 18.3: Update to iPadOS 18.3

macOS Sequoia versions prior to 15.3: Update to macOS Sequoia 15.3

watchOS versions prior to 11.3: Update to watchOS 11.3

tvOS versions prior to 18.3: Update to tvOS 18.3

As a temporary workaround, consider disabling the Core Media component until a patch is available. Restrict access to the vulnerable component to minimize the risk of exploitation. Avoid using the vulnerable function until the issue is resolved.

Fix

RCE

LPE

DoS

Use After Free

Incorrect Default Permissions

Weakness Enumeration

Related Identifiers

BDU:2025-00858
CVE-2025-24085

Affected Products

Apple Macos
Ios
Ipados
Tvos
Visionos
Watchos