Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

CVE-2025-31197

🗓️ 29 Apr 2025 02:05:21Reported by appleType 
cve
 cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 81 Views

CVE-2025-31197 fixed with improved checks in various Apple operating systems to prevent app termination.

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
apple
Apple		About the security content of tvOS 18.4
31 Mar 202500:00
–apple
apple
Apple		About the security content of macOS Sequoia 15.4
31 Mar 202500:00
–apple
apple
Apple		About the security content of iPadOS 17.7.6
31 Mar 202500:00
–apple
apple
Apple		About the security content of macOS Sonoma 14.7.5
31 Mar 202500:00
–apple
apple
Apple		About the security content of macOS Ventura 13.7.5
31 Mar 202500:00
–apple
apple
Apple		About the security content of iOS 18.4 and iPadOS 18.4
31 Mar 202500:00
–apple
apple
Apple		About the security content of visionOS 2.4
31 Mar 202500:00
–apple
nessus
Tenable Nessus		Apple iOS < 18.4 Multiple Vulnerabilities (122371)
31 Mar 202500:00
–nessus
nessus
Tenable Nessus		macOS 15.x < 15.4 Multiple Vulnerabilities (122373)
31 Mar 202500:00
–nessus
nessus
Tenable Nessus		macOS 14.x < 14.7.5 Multiple Vulnerabilities (122374)
31 Mar 202500:00
–nessus
Rows per page
NVD
Vulners
Node
OR
appleipadosRange<17.7.6
appleipadosRange18.0–18.4
appleiphone_osRange<18.4
applemacosRange<13.7.5
applemacosRange14.0–14.7.5
applemacosRange15.0–15.4
appletvosRange<18.4
applevisionosRange<2.4
[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "17.7.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "13.7.5",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "14.7.5",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "15.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "tvOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "visionOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.4",
        "versionType": "custom"
      }
    ]
  }
]

robzrx

AirBorne(AirPlay/CarPlayexploit)Info&Status

syedaquib77

Vulnerability Alert: Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices Timeline: Disclosure: 2025-04-29, Patch: 2025-04-30 Attribution: Product Security @ Apple cveId: CVE-2025-31197 baseScore: 5.7 cvssMetrics: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H cvssSeverity: Medium EPSS Percentile: 3.61% exploitMaturity: Proof-of-Concept affectedVersions: - Apple devices supporting AirPlay - Third-party devices leveraging the AirPlay SDK - macOS devices - Speakers and receivers leveraging the AirPlay SDK fixedVersions: - iOS 18.4 - iPadOS 18.4 - iPadOS 17.7.6 - macOS Sequoia 15.4 - macOS Sonoma 14.7.5 - macOS Ventura 13.7.5 - tvOS 18.4 - visionOS 2.4 - AirPlay audio SDK 2.7.1 - AirPlay video SDK 3.6.0.126 - CarPlay Communication Plug-in R18.1 Attack Vectors: - RCE via AirPlay - Network-based attacks Summary: Cybersecurity researchers disclosed multiple vulnerabilities in Apple's AirPlay protocol, codenamed AirBorne. These flaws could enable zero-click remote code execution on affected devices, facilitating malware spread across networks. Exploits may cause DoS, informational disclosures, and Man-in-the-Middle (MitM) attacks. Apple addressed these issues through improved validation checks in the listed software versions. Impact Scope: Potential access to devices, unintended app termination, spread of malware across networks. Recommended Actions: - Update to the latest software versions listed to mitigate risks. Related Resources: - https://t.co/IZVeUgTM0a - https://t.co/i1aeXuVExb - https://t.co/Caf8QyzNWo - https://t.co/Cg5Ww9mucz - https://t.co/B3HUTIvl7f - https://t.co/7uWmpgHetq - https://t.co/Z2BHO69l9j Tags: #AirPlay #Apple #Vulnerability #RCE #Zero-Click #Wormable #NetworkSecurity #macOS #iOS #tvOS #visionOS #AirBorne #Oligo #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 09:10Current
7.4High risk
Vulners AI Score7.4
CVSS 3.15.7
EPSS0.00289
SSVC
CWE-416
cve identifierapple operating systemsapp terminationlocal networksecurity fix
81