CVE-2025-24211

Published Mar 31, 2025

Last updated 18 days ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-24211 is a memory corruption vulnerability affecting Apple products, specifically related to processing video files. The vulnerability lies within the Video File Handler component of macOS, tvOS, iPadOS, and visionOS. The vulnerability is triggered when processing a maliciously crafted video file, which can lead to unexpected application termination or corruption of process memory. The issue is addressed through improved memory handling in the patched versions of the operating systems.

Description: This issue was addressed with improved memory handling. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Source: product-security@apple.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-400

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "687E67E4-136D-4154-BA6F-5ACA16254023",
            "versionEndExcluding": "17.7.6"
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BAAF5169-C6A9-449A-B41F-2CB1801EBA4B",
            "versionEndExcluding": "18.4",
            "versionStartIncluding": "18.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D9C73F9-FEF4-4FC1-B83D-56566AD35990",
            "versionEndExcluding": "18.4"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FAFA86AE-8EE9-414C-9FD2-C8551FF2A5CC",
            "versionEndExcluding": "13.7.5",
            "versionStartIncluding": "13.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D05DCA25-A1A0-4AEA-9F31-952803114EE2",
            "versionEndExcluding": "14.7.5",
            "versionStartIncluding": "14.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1320B815-0457-4276-83B9-AFAFDAF17EDA",
            "versionEndExcluding": "15.4",
            "versionStartIncluding": "15.0"
          },
          {
            "criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8C61CCC2-87D3-4A3A-837B-63C48299A7AD",
            "versionEndExcluding": "18.4"
          },
          {
            "criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E82603D7-A630-4B9B-9C51-880667F05EC7",
            "versionEndExcluding": "2.4"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]