CVE-2025-31226mediumCWE-400

CVE-2025-31226

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.2%

probabilidad de explotación

0.2%top 87% de las CVE

explotación observada

noninguna fuente lo reporta

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted image may lead to a denial-of-service.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Productos afectados

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2025/May/10 http://seclists.org/fulldisclosure/2025/May/12 http://seclists.org/fulldisclosure/2025/May/5 http://seclists.org/fulldisclosure/2025/May/6 http://seclists.org/fulldisclosure/2025/May/7 https://support.apple.com/en-us/122404 https://support.apple.com/en-us/122405 https://support.apple.com/en-us/122716 https://support.apple.com/en-us/122720 https://support.apple.com/en-us/122721 https://support.apple.com/en-us/122722