Lucene search
+L

CVE-2025-31239

🗓️ 12 May 2025 21:42:21Reported by appleType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 79 Views

Use-after-free issue fixed with memory management improvements in various operating systems and devices.

Related
Detection
Affected
Refs
Social
NVD
Vulners
Node
OR
appleipadosRange<17.7.7
appleipadosRange18.018.5
appleiphone_osRange<18.5
applemacosRange13.013.7.6
applemacosRange14.014.7.6
applemacosRange15.015.5
appletvosRange<18.5
applevisionosRange<2.5
applewatchosRange<11.5
[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iPadOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "17.7.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "13.7.6",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "14.7.6",
        "versionType": "custom"
      },
      {
        "version": "0",
        "status": "affected",
        "lessThan": "15.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "tvOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "18.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "visionOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "11.5",
        "versionType": "custom"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: Apple iOS/iPadOS Multiple Security Vulnerability Fixes Timeline: Disclosure: 2025-05-12, Patch: 2025-05-12 cveId: CVE-2025-31239 baseScore: 3.3 cvssMetrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L cvssSeverity: Low EPSS Percentile: 6.19% exploitMaturity: Not Available affectedVersions: - Versions prior to iOS 18.5 - Versions prior to iPadOS 18.5 - Versions prior to latest macOS Sequoia update - Versions prior to latest macOS Sonoma update - Versions prior to latest macOS Ventura update - Versions prior to latest watchOS update - Versions prior to latest tvOS update - Versions prior to latest visionOS update fixedVersions: - iOS 18.5 - iPadOS 18.5 - macOS Sequoia (latest update) - macOS Sonoma (latest update) - macOS Ventura (latest update) - watchOS (latest update) - tvOS (latest update) - visionOS (latest update) Summary: Apple has released iOS 18.5 and iPadOS 18.5 updates addressing multiple security vulnerabilities, notably in media processing components like AppleJPEG and WebKit. These flaws could cause arbitrary code execution, information leakage, or crashes. Currently, no active exploitation is reported in the wild. Recommended Actions: - Update to the latest iOS, iPadOS, and macOS versions immediately to mitigate risks. Related Resources: - https://t.co/wTSdy1uAv1 Tags: #Apple #iOS #iPadOS #macOS #watchOS #tvOS #visionOS #vulnerability #securityupdate #arbitrarycodeexecution #informationleakage #privilegeescalation #mediaprocessing #WebKit #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:10Current
7High risk
Vulners AI Score7
CVSS 3.14.3
EPSS0.00654
SSVC
79