CVE-2025-24230

An out-of-bounds read issue was addressed with improved input validation

Critical · published March 31, 2025

CVSS v3.1
9.8
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

🚨 A crafty audio file is your unwelcome guest! This out-of-bounds read issue can unexpectedly crash apps, and it's more critical than you might think! 🔥 Think of it like a restaurant that serves up a dish nobody ordered — it not only surprises the diners but can also lead to chaos in the kitchen! That's what happens when an app encounters unexpected data: it can't handle it and crashes. If exploited, an attacker could cause apps to terminate unexpectedly, leading to a frustrating user experience. In the worst-case scenario, this vulnerability could be leveraged to disrupt services, leaving users unable to access important functions on their devices.

Put simply

Think of it like a restaurant that serves up a dish nobody ordered — it not only surprises the diners but can also lead to chaos in the kitchen! That's what happens when an app encounters unexpected data: it can't handle it and crashes. This out-of-bounds read vulnerability arises from insufficient input validation when processing audio files, allowing attackers to manipulate the data and trigger app crashes.

What to do

If exploited, an attacker could cause apps to terminate unexpectedly, leading to a frustrating user experience. In the worst-case scenario, this vulnerability could be leveraged to disrupt services, leaving users unable to access important functions on their devices. To safeguard against this vulnerability, users should immediately update to the latest versions: iOS 18.4, iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, and watchOS 11.4. Stay proactive by checking for updates regularly! You've got this! By following these steps, you'll keep your devices safe and sound! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01883 · 79.3th percentile
Published
2025-03-31T22:23Z
EPSS history
Timeline
  • 31 MAR 22:23Z
    An out-of-bounds read issue was addressed with improved input validation
    cvelistv5