Lucene search
+L

CVE-2025-24271

🗓️ 29 Apr 2025 02:05:18Reported by appleType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 136 Views

Access issue fixed in multiple macOS and iPadOS versions preventing unauthorized AirPlay commands.

Related
Detection
Affected
Refs
Social
NVD
Vulners
Node
OR
appleipadosRange<17.7.6
appleipadosRange18.018.4
appleiphone_osRange<18.4
applemacosRange<13.7.5
applemacosRange14.014.7.5
applemacosRange15.015.4
appletvosRange<18.4
applevisionosRange<2.4
[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "17.7.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "13.7.5",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "14.7.5",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "15.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "tvOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "visionOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.4",
        "versionType": "custom"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: AirPlay Vulnerabilities Allow Zero-Click Takeover Timeline: Disclosure: 2025-04-30, Patch: 2025-04 cveId: CVE-2025-24132 cvssSeverity: Critical exploitMaturity: Proof-of-Concept affectedVersions: - Apple devices (iOS, iPadOS, macOS) - Third-party devices using AirPlay SDK - macOS devices - Speakers and receivers using AirPlay SDK - CarPlay devices fixedVersions: - Recent iOS releases - Recent iPadOS releases - Recent macOS releases Attack Vectors: - Zero-click remote code execution - Wormable exploits via AirPlay protocol - Use-after-free exploitation (CVE-2025-24252) - Stack-based buffer overflow (CVE-2025-24132) - Unauthenticated AirPlay command injection (CVE-2025-24271) Summary: The AirPlay vulnerabilities, known as the 'AirBorne' flaws, impact Apple's AirPlay protocol and SDK, including Apple devices (iOS, iPadOS, macOS) and third-party devices. These 23 vulnerabilities include 17 CVEs, with critical ones like CVE-2025-24132 and CVE-2025-24252 enabling wormable zero-click remote code execution (RCE). Exploitation requires no user interaction, allowing attackers to take over devices and spread malware via local networks, potentially leading to espionage, ransomware, and supply-chain attacks. Other impacts include security protection bypass, file reading, information disclosure, man-in-the-middle (MiTM) attacks, and denial of service (DoS). Apple has patched these issues in recent OS releases. Oligo Security provided proof-of-concept exploits and demonstrated the risks to Apple devices and AirPlay SDK-using products such as speakers, receivers, and CarPlay automotive systems. Impact Scope: Potential for full device takeover and lateral movement in enterprise networks. Impacts extend to Apple devices and third-party hardware using AirPlay SDK, with risks of espionage, ransomware, supply-chain attacks, information disclosure, and denial of service. Recommended Actions: - Apply the latest patches from Apple for iOS, iPadOS, and macOS as released. - Disable AirPlay when not in use and restrict AirPlay receiver settings to trusted devices only. Related Resources: - https://t.co/sQUKtHOQ4e - https://t.co/LK3YBkA9Gl - https://t.co/X8rh2TG84H - https://t.co/7iQQTJDF2o - https://t.co/2CDjBGYAmU Tags: #Apple #AirPlay #Vulnerability #Zero-Click #RCE #Protocol #SDK #macOS #iOS #iPadOS #CarPlay #Oligo_Security #SecurityWeek #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:58Current
7.4High risk
Vulners AI Score7.4
CVSS 3.15.4
EPSS0.00487
SSVC
136