CVE-2025-24252
HIGH 8.8EPSS 1.3%
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
- Affected
- Apple · iOS and iPadOS · iPadOS · macOS · tvOS · visionOS
- CVSS v3.1 CNA
- 8.8 HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 1.30% chance of exploitation in the next 30 days, 70th percentile
- Published
- 2025-04-29
- Updated
- 2026-04-02
Proof-of-concept exploits (2)
- cakescats/airborn-IOS-CVE-2025-242523★ · 2025-05-11
- ekomsSavior/AirBorne-PoC163★ · 2026-01-08
Security advisories
- https://support.apple.com/en-us/122371
- https://support.apple.com/en-us/122372
- https://support.apple.com/en-us/122373
- https://support.apple.com/en-us/122374
- https://support.apple.com/en-us/122375
- https://support.apple.com/en-us/122377
- https://support.apple.com/en-us/122378