CVE-2025-24257

HIGH

Apple Ipados < 18.4 - Out-of-Bounds Write

Title source: rule

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to cause unexpected system termination or write kernel memory.

Exploits (2)

github SUSPICIOUS 2 stars

by adminlove520 · pythonpoc

https://github.com/adminlove520/CVE-Poc_All_in_One/tree/main/2025/CVE-2025-24257

View Code ZIP pw:eip

nomisec SUSPICIOUS

by Learningdisordercapital35 · poc

https://github.com/Learningdisordercapital35/CVE_2025_24257----NOT-MINE

View Code ZIP pw:eip

References (8)

https://support.apple.com/en-us/122376

[Vendor Advisory] https://support.apple.com/en-us/122371

[Vendor Advisory] https://support.apple.com/en-us/122373

[Vendor Advisory] https://support.apple.com/en-us/122378

[Mailing List] http://seclists.org/fulldisclosure/2025/Apr/12

[Mailing List] http://seclists.org/fulldisclosure/2025/Apr/13

[Mailing List] http://seclists.org/fulldisclosure/2025/Apr/4

[Mailing List] http://seclists.org/fulldisclosure/2025/Apr/8

Scores

CVSS v3 7.1

EPSS 0.0010

EPSS Percentile 28.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Details

CWE

CWE-787

Status published

Products (8)

Apple/iOS and iPadOS < 18.4

apple/ipados < 18.4

apple/iphone_os < 18.4

Apple/macOS < 15.4

apple/macos 15.0 - 15.4

apple/visionos < 2.4

Apple/visionOS < 2.4

Apple/watchOS < 11.4

Published Mar 31, 2025

Tracked Since Feb 18, 2026