PT-2025-18328 · Apple · Airplay Audio Sdk+2

Uri Katz · Published 2025-04-30 · Updated 2025-12-08 · CVE-2025-30422

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions AirPlay audio SDK versions prior to 2.7.1 AirPlay video SDK versions prior to 3.6.0.126 CarPlay Communication Plug-in versions prior to R18.1

Description A buffer overflow issue was addressed by improving input validation. This could allow an attacker on the local network to cause an unexpected termination of the application.

Recommendations For AirPlay audio SDK versions prior to 2.7.1, update to version 2.7.1 to resolve the issue. For AirPlay video SDK versions prior to 3.6.0.126, update to version 3.6.0.126 to resolve the issue. For CarPlay Communication Plug-in versions prior to R18.1, update to version R18.1 to resolve the issue.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2025-30422

Affected Products

Airplay Audio Sdk

Airplay Video Sdk

Carplay Communication Plug-In

References · 9

• https://osv.dev/vulnerability/CVE-2025-30422 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30422 · Security Note
• https://support.apple.com/en-us/122403 · Vendor Advisory
• https://twitter.com/syedaquib77/status/1919501842813472833 · Twitter Post
• https://reddit.com/r/hacking/comments/1pgzriq/what_other_options_are_there_when_all_methods_of · Reddit Post
• https://reddit.com/r/apple/comments/1kfqo6c/airborne_airplaycarplay_exploit_info_status · Reddit Post
• https://twitter.com/CVEnew/status/1917689186775359927 · Twitter Post
• https://t.me/cvetracker/22761 · Telegram Post
• https://t.me/cvedetector/24152 · Telegram Post