CVE-2025-31201

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.4.1 iPadOS versions prior to 18.4.1 macOS Sequoia versions prior to 15.4.1 tvOS versions prior to 18.4.1 visionOS versions prior to 2.4.1

Description A memory out-of-bounds read in the RPAC component allows an attacker with arbitrary read and write capabilities to bypass Pointer Authentication, a security mechanism designed to prevent the modification of pointers in memory. The issue may be triggered via CoreAudio. There are reports that this flaw has been exploited in extremely sophisticated, targeted attacks against specific individuals using iOS.

Recommendations Update iOS to version 18.4.1. Update iPadOS to version 18.4.1. Update macOS Sequoia to version 15.4.1. Update tvOS to version 18.4.1. Update visionOS to version 2.4.1.