PT-2025-18939 · Apple · Ios+2

Duy Trần + 3 · CVE-2025-31207 · Published 2025-05-03 · Updated 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.5 iPadOS versions prior to 18.5

Description A logic issue was identified and addressed through improved checks within the FrontBoard component. This issue allows an application to potentially enumerate a user's installed applications. Reports indicate that this issue has been exploited by some App Store applications to detect the presence of TrollStore on a device.

Recommendations Update to iOS version 18.5 or later. Update to iPadOS version 18.5 or later.

Fix

SQL injection

Information Disclosure

Weakness Enumeration

CWE-89

CWE-200

Related Identifiers

BDU:2025-05420

CVE-2025-31207

Affected Products

Ios

Ios/Ipados

Ipados

References · 15

• https://support.apple.com/en-us/122404 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31207 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31207 · Security Note
• https://bdu.fstec.ru/vul/2025-05420 · Security Note
• https://twitter.com/transilienceai/status/1918508442052079857 · Twitter Post
• https://twitter.com/icrazeios/status/2036728209023078598 · Twitter Post
• https://twitter.com/seanistethered/status/1922703062935724058 · Twitter Post
• https://twitter.com/ichitaso/status/1918575178252206216 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025051303 · Note
• https://reddit.com/r/CVEWatch/comments/1kegdvw/top_10_trending_cves_04052025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1kf7xj0/top_10_trending_cves_05052025 · Reddit Post
• https://twitter.com/c4ndyf1sh/status/1924956320379113785 · Twitter Post
• https://twitter.com/CVEnew/status/1922053062547456336 · Twitter Post
• https://twitter.com/grok/status/1918572558276063351 · Twitter Post
• http://seclists.org/fulldisclosure/2025/May/5 · Note