CVE-2025-24252

Published Apr 29, 2025

Last updated 8 days ago

Apple

AirPlay

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-24252 is a use-after-free (UAF) vulnerability in Apple's AirPlay protocol. It stems from a memory management issue. A successful exploit could allow a remote attacker to execute arbitrary code. This vulnerability is part of a set of vulnerabilities known as "AirBorne". When CVE-2025-24252 is combined with CVE-2025-24206 (an authentication bypass vulnerability), it can lead to zero-click remote code execution (RCE) on vulnerable devices within the same network. This combination allows an attacker to execute code remotely on MacOS devices. It has been fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, and visionOS 2.4.

Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
Source: product-security@apple.com
NVD status: Awaiting Analysis

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Overview

AI description

Social media

References