CVE-2025-24190

The issue was addressed with improved memory handling

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

🚨 Beware the video surprise! A maliciously crafted video file can cause unexpected app terminations and memory corruption, like a pop-up surprise party that wreaks havoc on your plans! 🔥 Think of it like a restaurant where a chef accidentally uses spoiled ingredients. The dish looks fine, but once served, it makes everyone sick and ruins the dining experience. This vulnerability turns a harmless video into a recipe for chaos in your apps! If exploited, this flaw could crash your app unexpectedly, leading to a frustrating user experience and potential data loss. Imagine your favorite streaming app crashing mid-movie because it couldn't handle a sneaky video file! That's absolutely devastating for your users.

Put simply

Think of it like a restaurant where a chef accidentally uses spoiled ingredients. The dish looks fine, but once served, it makes everyone sick and ruins the dining experience. This vulnerability turns a harmless video into a recipe for chaos in your apps! This vulnerability arises from improper memory handling when processing crafted video files, which can terminate the application or corrupt the memory process, risking stability and reliability of affected devices.

What to do

If exploited, this flaw could crash your app unexpectedly, leading to a frustrating user experience and potential data loss. Imagine your favorite streaming app crashing mid-movie because it couldn't handle a sneaky video file! That's absolutely devastating for your users. To protect yourself, update immediately to iOS 18.4, iPadOS 18.4, or the latest versions of macOS and tvOS as specified. Regularly check for updates and patch your devices to ensure you’re shielded against these crafty video attacks. 🛡️ You've got this! Stay proactive with your updates, and you'll keep your apps running smoothly! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01920 · 79.8th percentile
Published
2025-03-31T22:22Z
EPSS history
Timeline
  • 31 MAR 22:22Z
    The issue was addressed with improved memory handling
    cvelistv5