CVE-2025-31191

Published Mar 31, 2025

Last updated 3 months ago

CVSS medium 5.5

Apple

iPadOS

iOS

macOS

tvOS

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-31191 is a vulnerability that affects multiple Apple operating systems, including macOS Ventura, tvOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma. It involves an issue where an app may be able to access sensitive user data due to state management issues. The vulnerability was addressed by Apple through improved state management in the security updates released on March 31, 2025. It was discovered that the exploit could allow an attacker to delete and replace a keychain entry used to sign security-scoped bookmarks to ultimately escape the App Sandbox without user interaction.

Description: This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.5, tvOS 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to access sensitive user data.
Source: product-security@apple.com
NVD status: Modified
Products: ipados, iphone_os, macos, tvos

Risk scores

CVSS 3.1

Type: Secondary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity: MEDIUM

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B3450F7-7B4A-46CE-A6E0-BBE6569F2EBF",
            "versionEndExcluding": "18.4"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D9C73F9-FEF4-4FC1-B83D-56566AD35990",
            "versionEndExcluding": "18.4"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "345CC17A-CCA4-4B82-A645-A5226A8DAEBB",
            "versionEndExcluding": "13.7.5"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D05DCA25-A1A0-4AEA-9F31-952803114EE2",
            "versionEndExcluding": "14.7.5",
            "versionStartIncluding": "14.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1320B815-0457-4276-83B9-AFAFDAF17EDA",
            "versionEndExcluding": "15.4",
            "versionStartIncluding": "15.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C61CCC2-87D3-4A3A-837B-63C48299A7AD",
            "versionEndExcluding": "18.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.