PT-2025-5320 · Apple · Macos Sequoia+1

Eisw0Lf + 1 · Published 2025-01-27 · Updated 2025-01-30 · CVE-2025-24153

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.3

Description A buffer overflow issue was addressed with improved memory handling. An application with root privileges may be able to execute arbitrary code with kernel privileges.

Recommendations For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue. As a temporary workaround, consider restricting applications with root privileges to minimize the risk of exploitation.

Fix

LPE

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2025-01627

CVE-2025-24153

Affected Products

Apple Macos

Macos Sequoia

References · 12

• https://support.apple.com/en-us/122068 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01627 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-24153 · Security Note
• https://osv.dev/vulnerability/CVE-2025-24153 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1884054676837929183 · Twitter Post
• https://reddit.com/r/k12cybersecurity/comments/1ictyj0/msisac_cybersecurity_advisory_multiple · Reddit Post
• https://t.me/cvenotify/109207 · Telegram Post
• https://t.me/cvedetector/16535 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24153 · Note
• https://twitter.com/CVEnew/status/1884008903383605487 · Twitter Post
• http://seclists.org/fulldisclosure/2025/Jan/15 · Note
• https://twitter.com/dailycve/status/1885033971257368688 · Twitter Post