CVE-2024-54518

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory...

CVE-2025-24126

An input validation issue in the AirPlay implementation of Apple products allows an attacker on the local network to corrupt process memory . This vulnerability impacts macOS Sonoma 14.7.5 , macOS Ventura 13.7.5 , iOS 18.3 , iPadOS 18.3 , tvOS 18.3 , and visionOS 2.3 . The issue has been addresse...

CVE-2025-24107

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3, iOS 18.3 and iPadOS 18.3. A malicious app may be able to gain root privileges...

CVE-2025-24107

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A malicious app may be able to gain root privileges...

CVE-2024-54522

CVE-2024-54522 affects Apple platforms (macOS Sequoia 15.2; watchOS 11.2; tvOS 18.2; iOS 18.2; iPadOS 18.2). The issue is described as an out-of-bounds/bounds-check problem that could allow an app to corrupt coprocessor memory. Apple lists the fix as part of the 18.2/Sequoia 15.2 security updates...

CVE-2025-24127

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24127

CVE-2025-24127 affects Apple platforms and is tied to a vulnerability in ARKit where parsing a file may lead to an unexpected app termination. The issue has been addressed in updated releases: iPadOS 17.7.4, iOS 18.3 and iPadOS 18.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, macOS Sequoia 15.3, ...

CVE-2024-54518

The issue was addressed with improved bounds checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, watchOS 11.2. An app may be able to corrupt coprocessor memory...

CVE-2025-24131

CVE-2025-24131 is an AirPlay vulnerability affecting Apple devices. A memory handling issue could allow a privileged attacker on the local network to cause a denial-of-service. The vulnerability is addressed in Apple security updates: iOS/iPadOS 18.3, visionOS 2.3, macOS Sonoma 14.7.5 (and relate...

CVE-2025-24161

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination...

CVE-2024-54499

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2025-24137

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3. An attacker on the local network may corrupt process memory...

CVE-2025-24137

A type confusion issue (data type mixing) exists in the AirPlay implementation across macOS , iOS , iPadOS , tvOS , and visionOS . This vulnerability could allow a remote attacker to execute arbitrary code or cause an application to terminate. Affected versions include macOS Ventura 13.7.3 , Sequ...

CVE-2025-24137

A type confusion issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A remote attacker may cause an unexpected application termination or arbitrary code execution...

CVE-2025-24160

The issue was addressed with improved checks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to an unexpected app termination...

CVE-2025-24160

A vulnerability in the CoreAudio component affects macOS, iOS, iPadOS, watchOS, tvOS, and visionOS . The issue stems from a flaw in how the system parses files, which can be triggered by a specially crafted file to cause an unexpected app termination . This vulnerability was reported by Google's ...

CVE-2025-24117

CVE-2025-24117 affects Apple platforms via LaunchServices, enabling an app to fingerprint the user. The issue is tied to improved redaction of sensitive information and is fixed in Apple updates: iPadOS 17.7.4, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, and watchOS 11.3. The publ...

CVE-2025-24117

This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, visionOS 2.3, watchOS 11.3. An app may be able to fingerprint the user...

CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user...

CVE-2024-54497

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. Processing web content may lead to a denial-of-service...