CVE-2025-24118

HIGH

Apple Ipados < 17.7.4 - Out-of-Bounds Write

Title source: rule

Description

The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.

Exploits (1)

nomisec WORKING POC 47 stars

by jprx · poc

https://github.com/jprx/CVE-2025-24118

View Code ZIP pw:eip

References (6)

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122067

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122068

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122069

[Mailing List] http://seclists.org/fulldisclosure/2025/Jan/14

[Mailing List] http://seclists.org/fulldisclosure/2025/Jan/15

[Mailing List] http://seclists.org/fulldisclosure/2025/Jan/16

Scores

CVSS v3 7.1

EPSS 0.2702

EPSS Percentile 96.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-787

Status published

Products (5)

apple/ipados < 17.7.4

Apple/iPadOS < 17.7.4

apple/macos < 14.7.3

Apple/macOS < 14.7.3

Apple/macOS < 15.3

Published Jan 27, 2025

Tracked Since Feb 18, 2026