CVE-2025-31235

MEDIUM

Apple Ipados < 17.7.7 - Double Free

Title source: rule

Description

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sequoia 15.5, macOS Sonoma 14.7.6. An app may be able to cause unexpected system termination.

References (8)

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122405

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122716

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122717

[Release Notes, Vendor Advisory] https://support.apple.com/en-us/122718

[Mailing List] http://seclists.org/fulldisclosure/2025/May/6

[Mailing List] http://seclists.org/fulldisclosure/2025/May/7

[Mailing List] http://seclists.org/fulldisclosure/2025/May/8

[Mailing List] http://seclists.org/fulldisclosure/2025/May/9

Scores

CVSS v3 6.5

EPSS 0.0007

EPSS Percentile 20.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Classification

CWE

CWE-415

Status published

Affected Products (2)

apple/ipados < 17.7.7

apple/macos < 13.7.6

Timeline

Published May 12, 2025

Tracked Since Feb 18, 2026