PT-2025-5299 · Apple · Visionos+6

Uri Katz

·

Published

2025-01-17

·

Updated

2025-04-30

·

CVE-2025-24126

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions visionOS versions prior to 2.3 iOS versions prior to 18.3 iPadOS versions prior to 18.3 macOS Sequoia versions prior to 15.3 watchOS versions prior to 11.3 tvOS versions prior to 18.3
Description An input validation issue was addressed, which could allow an attacker on the local network to cause unexpected system termination or corrupt process memory. The issue is also related to a buffer overflow vulnerability in the implementation of the AirPlay technology in the affected operating systems, which could be exploited by a remote attacker to cause a denial of service or execute arbitrary code.
Recommendations For visionOS versions prior to 2.3, update to visionOS 2.3 to resolve the issue. For iOS versions prior to 18.3, update to iOS 18.3 to resolve the issue. For iPadOS versions prior to 18.3, update to iPadOS 18.3 to resolve the issue. For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue. For watchOS versions prior to 11.3, update to watchOS 11.3 to resolve the issue. For tvOS versions prior to 18.3, update to tvOS 18.3 to resolve the issue.

Fix

Resource Exhaustion

Buffer Overflow

Weakness Enumeration

CWE-400CWE-119

Related Identifiers

BDU:2025-01267
CVE-2025-24126

Affected Products

Apple Macos
Ios
Ipados
Macos Sequoia
Tvos
Visionos
Watchos