PT-2025-13888 · Apple · Apple Macos

Published 2025-03-31 · Updated 2025-10-16 · CVE-2025-24195

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to Ventura 13.7.5 macOS versions prior to Sequoia 15.4 macOS versions prior to Sonoma 14.7.5

Description The issue involves an integer overflow that was addressed through enhanced input validation. Successful exploitation of this issue may allow a user to elevate privileges. The vulnerability is related to the Libinfo library in macOS operating systems. Exploitation could allow a remote attacker to gain elevated privileges.

Recommendations Update to macOS Ventura 13.7.5 or later. Update to macOS Sequoia 15.4 or later. Update to macOS Sonoma 14.7.5 or later.

Fix

Incorrect Default Permissions

Integer Overflow

Weakness Enumeration

CWE-276

CWE-190

Related Identifiers

BDU:2025-06799

CVE-2025-24195

Affected Products

Apple Macos

References · 15

• https://bdu.fstec.ru/vul/2025-06799 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24195 · Vendor Advisory
• https://support.apple.com/en-us/122374 · Vendor Advisory
• https://support.apple.com/en-us/122375 · Vendor Advisory
• https://support.apple.com/en-us/122373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24195 · Security Note
• http://seclists.org/fulldisclosure/2025/Apr/8 · Note
• https://twitter.com/SecurtyRating/status/1909244816925323587 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Apr/9 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24195 · Note
• http://seclists.org/fulldisclosure/2025/Apr/10 · Note
• https://t.me/cvenotify/118000 · Telegram Post
• https://twitter.com/CVEnew/status/1906848950361206941 · Twitter Post
• https://twitter.com/SecurtyRating/status/1909244815759269924 · Twitter Post
• https://twitter.com/forensicdave/status/1978838119999852666 · Twitter Post