Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-24252. PoCs published by ekomsSavior, cakescats.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2025-24252 and CVE-2025-24132, targeting Apple's AirPlay service. It includes both a crash trigger via malformed mDNS packets and a reverse shell exploit leveraging a heap overflow, with optional persistence mechanisms.
Description
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2025-24252 and CVE-2025-24132, targeting Apple's AirPlay service. It includes both a crash trigger via malformed mDNS packets and a reverse shell exploit leveraging a heap overflow, with optional persistence mechanisms.
This repository contains a bash script designed to scan iOS log archives for potential indicators of compromise related to the 'Airborne' vulnerabilities affecting Apple's AirPlay protocol. It automates log queries to identify anomalies in system processes involved in AirPlay and related services.
References (8)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H