PT-2025-18126 · Apple · Apple Macos+6

Uri Katz · Published 2025-03-31 · Updated 2026-03-08 · CVE-2025-24252

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 15.4 Apple tvOS versions prior to 18.4 Apple macOS Ventura versions prior to 13.7.5 Apple iPadOS versions prior to 17.7.6 Apple macOS Sonoma versions prior to 14.7.5 Apple iOS versions prior to 18.4 Apple iPadOS versions prior to 18.4 Apple visionOS versions prior to 2.4

Description A use-after-free issue exists due to improper memory management. This issue allows a remote attacker to potentially corrupt process memory. The vulnerability is actively exploited and enables zero-click remote code execution via the AirPlay protocol. An attacker on the local network may be able to compromise devices. The vulnerability affects multiple Apple operating systems, including macOS, tvOS, iPadOS, iOS, and visionOS. Exploitation of this issue can lead to malware installation without user interaction and has the potential to spread across networks. A demonstration of the exploit targeting the Apple Music App is available.

Recommendations Update to macOS version 15.4 or later. Update to tvOS version 18.4 or later. Update to macOS Ventura version 13.7.5 or later. Update to iPadOS version 17.7.6 or later. Update to macOS Sonoma version 14.7.5 or later. Update to iOS version 18.4 or later. Update to iPadOS version 18.4 or later. Update to visionOS version 2.4 or later.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06520

CVE-2025-24252

Affected Products

Apple Macos

Ios

Ipados

Macos Sonoma

Macos Ventura

Tvos

Visionos

References · 66

• 🔥 https://github.com/cakescats/airborn-IOS-CVE-2025-24252 · Exploit
• 🔥 https://github.com/cakescats/airborn-IOS-CVE-2025-24252/blob/main/airborn_arts_CVE-2025-24252_extractor.sh · Exploit
• https://support.apple.com/en-us/122374 · Vendor Advisory
• https://support.apple.com/en-us/122378 · Vendor Advisory
• https://support.apple.com/en-us/122372 · Vendor Advisory
• https://support.apple.com/en-us/122371 · Vendor Advisory
• https://support.apple.com/en-us/122375 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06520 · Security Note
• https://support.apple.com/en-us/122377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24252 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24252 · Vendor Advisory
• https://support.apple.com/en-us/122373 · Vendor Advisory
• https://t.me/cvedetector/23972 · Telegram Post
• https://twitter.com/CVEnew/status/1917058900588957889 · Twitter Post
• https://twitter.com/syedaquib77/status/1917998838868263150 · Twitter Post