CVE-2025-46285

HIGH

macOS < 14.8.3 - Integer Overflow to Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-46285. PoCs published by Yankeelucas.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-46285, an integer overflow vulnerability in Apple OS time-handling mechanisms that could lead to privilege escalation. The writeup includes root cause analysis, patch details, and theoretical exploitation paths but does not contain functional exploit code.

Description

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.

Exploits (1)

github WRITEUP 1 stars

by Yankeelucas · makefilepoc

https://github.com/Yankeelucas/OpenSovix

View Code ZIP pw:eip

This repository provides a detailed technical analysis of CVE-2025-46285, an integer overflow vulnerability in Apple OS time-handling mechanisms that could lead to privilege escalation. The writeup includes root cause analysis, patch details, and theoretical exploitation paths but does not contain functional exploit code.

Classification

Writeup 98%

Attack Type

Lpe

Complexity

Moderate

Reliability

Theoretical

Target: Apple macOS, iOS, iPadOS, tvOS, watchOS, visionOS (versions prior to 64-bit timestamp patches)

No auth needed

Prerequisites: Access to a vulnerable Apple OS device · Ability to execute crafted time-related API calls or manipulate system time values

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548 - Abuse Elevation Control Mechanism

mistral-large-3 · analyzed Jul 11, 2026 Full analysis →

References (8)

Core 8

Core References

Release Notes, Vendor Advisory

https://support.apple.com/en-us/125887

Release Notes, Vendor Advisory

https://support.apple.com/en-us/125888

Vendor Advisory

https://support.apple.com/en-us/125884

Vendor Advisory

https://support.apple.com/en-us/125885

Vendor Advisory

https://support.apple.com/en-us/125886

Vendor Advisory

https://support.apple.com/en-us/125889

Vendor Advisory

https://support.apple.com/en-us/125890

Vendor Advisory

https://support.apple.com/en-us/125891

Scores

CVSS v3 7.8

EPSS 0.0018

EPSS Percentile 8.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-190

Status published

Products (9)

Apple/iOS and iPadOS < 18.7.3

Apple/iOS and iPadOS < 26.2

apple/macos < 14.8.3

Apple/macOS < 14.8.3

Apple/macOS < 15.7.3

Apple/macOS < 26.2

Apple/tvOS < 26.2

Apple/visionOS < 26.2

Apple/watchOS < 26.2

Published Dec 12, 2025

Tracked Since Feb 18, 2026