PT-2025-5287 · Apple · Macos Sequoia+2

D4M0N · Published 2025-01-27 · Updated 2025-01-30 · CVE-2025-24112

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.3 macOS Sonoma versions prior to 14.7.3

Description The issue is related to parsing a file, which may lead to an unexpected app termination. It is also associated with unlimited resource allocation, potentially allowing an attacker to gain unauthorized access to confidential data.

Recommendations For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue. For macOS Sonoma versions prior to 14.7.3, update to macOS Sonoma 14.7.3 to resolve the issue.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2025-01389

CVE-2025-24112

Affected Products

Apple Macos

Macos Sequoia

Macos Sonoma

References · 11

• https://support.apple.com/en-us/122068 · Vendor Advisory
• https://support.apple.com/en-us/122069 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01389 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24112 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24112 · Security Note
• https://t.me/cvenotify/109261 · Telegram Post
• https://twitter.com/CVEnew/status/1884008901676523607 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jan/16 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24112 · Note
• https://reddit.com/r/k12cybersecurity/comments/1ictyj0/msisac_cybersecurity_advisory_multiple · Reddit Post
• http://seclists.org/fulldisclosure/2025/Jan/15 · Note