PT-2025-5299
CVE-2025-24126
·
Published
2025-01-17
·
Updated
2025-04-30
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
visionOS versions prior to 2.3
iOS versions prior to 18.3
iPadOS versions prior to 18.3
macOS Sequoia versions prior to 15.3
watchOS versions prior to 11.3
tvOS versions prior to 18.3
Description
An input validation issue was addressed, which could allow an attacker on the local network to cause unexpected system termination or corrupt process memory. The issue is also related to a buffer overflow vulnerability in the implementation of the AirPlay technology in the affected operating systems, which could be exploited by a remote attacker to cause a denial of service or execute arbitrary code.
Recommendations
For visionOS versions prior to 2.3, update to visionOS 2.3 to resolve the issue.
For iOS versions prior to 18.3, update to iOS 18.3 to resolve the issue.
For iPadOS versions prior to 18.3, update to iPadOS 18.3 to resolve the issue.
For macOS Sequoia versions prior to 15.3, update to macOS Sequoia 15.3 to resolve the issue.
For watchOS versions prior to 11.3, update to watchOS 11.3 to resolve the issue.
For tvOS versions prior to 18.3, update to tvOS 18.3 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾