AI description
CVE-2025-24154 is an out-of-bounds write vulnerability that affects several Apple operating systems, including iOS, iPadOS, macOS (Sequoia, Sonoma, and Ventura), and visionOS. The flaw is rooted in improper input validation within kernel-level code, which fails to properly restrict input size before writing data to memory. This allows an attacker to write beyond the bounds of an allocated buffer, potentially leading to unexpected system termination or kernel memory corruption. The vulnerability can be exploited remotely over a network without requiring user interaction or special privileges. Apple has resolved this issue by implementing improved input validation across its affected platforms. The fixes are included in the releases of iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, and visionOS 2.3.
- Description
- An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, visionOS 2.3. An attacker may be able to cause unexpected system termination or corrupt kernel memory.
- Source
- product-security@apple.com
- NVD status
- Modified
- Products
- ipados, iphone_os, macos, visionos
CVSS 3.1
- Type
- Primary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Severity
- CRITICAL
- Hype score
- Not currently trending
まずios18のSafari限定の脆弱性を調べさせて、種類ごとにわけるやろ…？ メモリ破壊・RCE系 【メモリ管理・領域逸脱系】 1-1、バッファオーバーフロー 1-1-1、CVE-2025-14174 [CVSS: 8.8 (High)] 1-1-2、CVE-2025-24154 [CVSS: 8.8 (H
@ashinowoto
25 Oct 2026
2278 Impressions
0 Retweets
6 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2025-24154 An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPad… https://t.co/pNEV1vT5Ik
@CVEnew
27 Jan 2025
873 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6B7F80FC-EB0A-4B78-8CB7-18E5F162CD6A",
"versionEndExcluding": "18.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"matchCriteriaId": "71A94ACA-8143-475F-8A89-8020B86CE80B",
"versionEndExcluding": "18.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "A12642CB-69CC-4C6E-A2C2-CA8AE736EE88",
"versionEndExcluding": "13.7.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "9C523C7E-B1CF-454B-8AFD-B462C5120D9E",
"versionEndExcluding": "14.7.3",
"versionStartIncluding": "14.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "33FE4A81-3E35-4934-ABBB-4531E8E249AF",
"versionEndExcluding": "15.3",
"versionStartIncluding": "15.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "F91BF3D5-D8E5-437C-8301-C9F22AAFB8BD",
"versionEndExcluding": "2.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]