PT-2025-5325 · Apple · Visionos+6
Published
2025-01-27
·
Updated
2025-01-29
·
CVE-2025-24160
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 14.7.3
iOS versions prior to 18.3
iPadOS versions prior to 17.7.4
watchOS versions prior to 11.3
tvOS versions prior to 18.3
visionOS versions prior to 2.3
Description
The issue is related to incorrect clearing or release of resources in the CoreAudio component of Apple operating systems. Exploitation of this issue may allow a remote attacker to cause a denial of service. Parsing a file may lead to an unexpected app termination.
Recommendations
For macOS versions prior to 14.7.3, update to macOS Sonoma 14.7.3 or later.
For iOS versions prior to 18.3, update to iOS 18.3 or later.
For iPadOS versions prior to 17.7.4, update to iPadOS 17.7.4 or later.
For watchOS versions prior to 11.3, update to watchOS 11.3 or later.
For tvOS versions prior to 18.3, update to tvOS 18.3 or later.
For visionOS versions prior to 2.3, update to visionOS 2.3 or later.
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Coreaudio
Apple Macos
Ios
Ipados
Tvos
Visionos
Watchos