CVE-2025-31226

MEDIUM

iPadOS < 17.7.7 - Denial of Service via Maliciously Crafted Image

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted image may lead to a denial-of-service.

References (11)

Core 11

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 18.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (12)
Apple/iOS and iPadOS < 18.5
apple/ipados < 17.7.7
Apple/iPadOS < 17.7.7
apple/iphone_os < 18.5
apple/macos < 15.5
Apple/macOS < 15.5
apple/tvos < 18.5
Apple/tvOS < 18.5
apple/visionos < 2.5
Apple/visionOS < 2.5
... and 2 more
Published May 12, 2025
Tracked Since Feb 18, 2026