CVE-2025-24137highCWE-843

CVE-2025-24137

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8epss 1.0%

probabilidad de explotación

1.0%top 40% de las CVE

explotación observada

noninguna fuente lo reporta

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3. An attacker on the local network may corrupt process memory.

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · tvOS Apple · visionOS

Referencias

http://seclists.org/fulldisclosure/2025/Jan/13 http://seclists.org/fulldisclosure/2025/Jan/14 http://seclists.org/fulldisclosure/2025/Jan/15 http://seclists.org/fulldisclosure/2025/Jan/16 http://seclists.org/fulldisclosure/2025/Jan/18 http://seclists.org/fulldisclosure/2025/Jan/19 https://support.apple.com/en-us/122066 https://support.apple.com/en-us/122067 https://support.apple.com/en-us/122068 https://support.apple.com/en-us/122069 https://support.apple.com/en-us/122072 https://support.apple.com/en-us/122073