Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-31202 (GCVE-0-2025-31202)
Vulnerability from cvelistv5
Published
2025-04-29 02:05
Modified
2025-04-29 15:21
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- An attacker on the local network may be able to cause a denial-of-service
Summary
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.
References
| ► | URL | Tags | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2025-31202",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-04-29T15:19:09.752262Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-476",
"description": "CWE-476 NULL Pointer Dereference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-04-29T15:21:54.314Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "tvOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "iOS and iPadOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "18.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "macOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "15.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "visionOS",
"vendor": "Apple",
"versions": [
{
"lessThan": "2.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "An attacker on the local network may be able to cause a denial-of-service",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-04-29T02:05:16.077Z",
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple"
},
"references": [
{
"url": "https://support.apple.com/en-us/122377"
},
{
"url": "https://support.apple.com/en-us/122371"
},
{
"url": "https://support.apple.com/en-us/122373"
},
{
"url": "https://support.apple.com/en-us/122378"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"assignerShortName": "apple",
"cveId": "CVE-2025-31202",
"datePublished": "2025-04-29T02:05:16.077Z",
"dateReserved": "2025-03-27T16:13:58.315Z",
"dateUpdated": "2025-04-29T15:21:54.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-31202\",\"sourceIdentifier\":\"product-security@apple.com\",\"published\":\"2025-04-29T03:15:35.040\",\"lastModified\":\"2025-05-05T20:07:59.807\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.\"},{\"lang\":\"es\",\"value\":\"Se solucion\u00f3 una desreferencia de puntero nulo mejorando la validaci\u00f3n de entrada. Este problema se solucion\u00f3 en iOS 18.4 y iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4 y visionOS 2.4. Un atacante en la red local podr\u00eda provocar una denegaci\u00f3n de servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.4\",\"matchCriteriaId\":\"6B3450F7-7B4A-46CE-A6E0-BBE6569F2EBF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.4\",\"matchCriteriaId\":\"0D9C73F9-FEF4-4FC1-B83D-56566AD35990\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"15.4\",\"matchCriteriaId\":\"E3BD0A90-23F1-430A-8119-E14055F7E621\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"18.4\",\"matchCriteriaId\":\"8C61CCC2-87D3-4A3A-837B-63C48299A7AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.4\",\"matchCriteriaId\":\"E82603D7-A630-4B9B-9C51-880667F05EC7\"}]}]}],\"references\":[{\"url\":\"https://support.apple.com/en-us/122371\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122373\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122377\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://support.apple.com/en-us/122378\",\"source\":\"product-security@apple.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-31202\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-04-29T15:19:09.752262Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-476\", \"description\": \"CWE-476 NULL Pointer Dereference\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-04-29T15:19:57.310Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Apple\", \"product\": \"tvOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.4\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"iOS and iPadOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"18.4\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"macOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"15.4\", \"versionType\": \"custom\"}]}, {\"vendor\": \"Apple\", \"product\": \"visionOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"2.4\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://support.apple.com/en-us/122377\"}, {\"url\": \"https://support.apple.com/en-us/122371\"}, {\"url\": \"https://support.apple.com/en-us/122373\"}, {\"url\": \"https://support.apple.com/en-us/122378\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"An attacker on the local network may be able to cause a denial-of-service\"}]}], \"providerMetadata\": {\"orgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"shortName\": \"apple\", \"dateUpdated\": \"2025-04-29T02:05:16.077Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-31202\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-04-29T15:21:54.314Z\", \"dateReserved\": \"2025-03-27T16:13:58.315Z\", \"assignerOrgId\": \"286789f9-fbc2-4510-9f9a-43facdede74c\", \"datePublished\": \"2025-04-29T02:05:16.077Z\", \"assignerShortName\": \"apple\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
wid-sec-w-2025-0668
Vulnerability from csaf_certbund
Published
2025-03-31 22:00
Modified
2025-08-11 22:00
Summary
Apple macOS: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erhöhte Rechte - sogar Root-Rechte - zu erlangen, um vertrauliche Informationen offenzulegen, um beliebigen Code auszuführen, um Daten zu manipulieren, um Sicherheitsmaßnahmen - sogar Sandbox-Einschränkungen - zu umgehen oder um einen Denial-of-Service-Zustand auszulösen.
Betroffene Betriebssysteme
- MacOS X
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Apple macOS ist ein Betriebssystem, das auf FreeBSD und Mach basiert.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um erh\u00f6hte Rechte - sogar Root-Rechte - zu erlangen, um vertrauliche Informationen offenzulegen, um beliebigen Code auszuf\u00fchren, um Daten zu manipulieren, um Sicherheitsma\u00dfnahmen - sogar Sandbox-Einschr\u00e4nkungen - zu umgehen oder um einen Denial-of-Service-Zustand auszul\u00f6sen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- MacOS X",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0668 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0668.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0668 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0668"
},
{
"category": "external",
"summary": "About the security content of macOS Ventura 13.7.5 vom 2025-03-31",
"url": "https://support.apple.com/en-us/122375"
},
{
"category": "external",
"summary": "About the security content of macOS Sonoma 14.7.5 vom 2025-03-31",
"url": "https://support.apple.com/en-us/122374"
},
{
"category": "external",
"summary": "About the security content of macOS Sequoia 15.4 vom 2025-03-31",
"url": "https://support.apple.com/en-us/122373"
},
{
"category": "external",
"summary": "KEV Catalog CVE-2025-24085 vom 2025-01-29",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085\u0026field_date_added_wrapper=all\u0026field_cve=\u0026sort_by=field_date_added\u0026items_per_page=20\u0026url"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20257-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021061.html"
}
],
"source_lang": "en-US",
"title": "Apple macOS: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-08-11T22:00:00.000+00:00",
"generator": {
"date": "2025-08-12T06:52:11.328+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-0668",
"initial_release_date": "2025-03-31T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-03-31T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-04-28T22:00:00.000+00:00",
"number": "2",
"summary": "CVE\u0027s erg\u00e4nzt"
},
{
"date": "2025-06-03T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-11T22:00:00.000+00:00",
"number": "4",
"summary": "CVE-Nummern erg\u00e4nzt"
},
{
"date": "2025-08-11T22:00:00.000+00:00",
"number": "5",
"summary": "CVE-2025-43205 erg\u00e4nzt"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "Ventura \u003c13.7.5",
"product": {
"name": "Apple macOS Ventura \u003c13.7.5",
"product_id": "T042238"
}
},
{
"category": "product_version",
"name": "Ventura 13.7.5",
"product": {
"name": "Apple macOS Ventura 13.7.5",
"product_id": "T042238-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:ventura__13.7.5"
}
}
},
{
"category": "product_version_range",
"name": "Sonoma \u003c14.7.5",
"product": {
"name": "Apple macOS Sonoma \u003c14.7.5",
"product_id": "T042239"
}
},
{
"category": "product_version",
"name": "Sonoma 14.7.5",
"product": {
"name": "Apple macOS Sonoma 14.7.5",
"product_id": "T042239-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:sonoma__14.7.5"
}
}
},
{
"category": "product_version_range",
"name": "Sequoia \u003c15.4",
"product": {
"name": "Apple macOS Sequoia \u003c15.4",
"product_id": "T042240"
}
},
{
"category": "product_version",
"name": "Sequoia 15.4",
"product": {
"name": "Apple macOS Sequoia 15.4",
"product_id": "T042240-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:mac_os:sequoia__15.4"
}
}
}
],
"category": "product_name",
"name": "macOS"
}
],
"category": "vendor",
"name": "Apple"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-27043",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2023-27043"
},
{
"cve": "CVE-2024-40864",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-40864"
},
{
"cve": "CVE-2024-48958",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-48958"
},
{
"cve": "CVE-2024-54533",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-54533"
},
{
"cve": "CVE-2024-56171",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-56171"
},
{
"cve": "CVE-2024-9681",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-9681"
},
{
"cve": "CVE-2025-24085",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24085"
},
{
"cve": "CVE-2025-24093",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24093"
},
{
"cve": "CVE-2025-24097",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24097"
},
{
"cve": "CVE-2025-24113",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24113"
},
{
"cve": "CVE-2025-24139",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24139"
},
{
"cve": "CVE-2025-24148",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24148"
},
{
"cve": "CVE-2025-24157",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24157"
},
{
"cve": "CVE-2025-24163",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24163"
},
{
"cve": "CVE-2025-24164",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24164"
},
{
"cve": "CVE-2025-24167",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24167"
},
{
"cve": "CVE-2025-24170",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24170"
},
{
"cve": "CVE-2025-24172",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24172"
},
{
"cve": "CVE-2025-24173",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24173"
},
{
"cve": "CVE-2025-24178",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24178"
},
{
"cve": "CVE-2025-24180",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24180"
},
{
"cve": "CVE-2025-24181",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24181"
},
{
"cve": "CVE-2025-24182",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24182"
},
{
"cve": "CVE-2025-24190",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24190"
},
{
"cve": "CVE-2025-24191",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24191"
},
{
"cve": "CVE-2025-24192",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24192"
},
{
"cve": "CVE-2025-24194",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24194"
},
{
"cve": "CVE-2025-24195",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24195"
},
{
"cve": "CVE-2025-24196",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24196"
},
{
"cve": "CVE-2025-24198",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24198"
},
{
"cve": "CVE-2025-24199",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24199"
},
{
"cve": "CVE-2025-24202",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24202"
},
{
"cve": "CVE-2025-24203",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24203"
},
{
"cve": "CVE-2025-24204",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24204"
},
{
"cve": "CVE-2025-24205",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24205"
},
{
"cve": "CVE-2025-24207",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24207"
},
{
"cve": "CVE-2025-24209",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24209"
},
{
"cve": "CVE-2025-24210",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24210"
},
{
"cve": "CVE-2025-24211",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24211"
},
{
"cve": "CVE-2025-24212",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24212"
},
{
"cve": "CVE-2025-24213",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24213"
},
{
"cve": "CVE-2025-24214",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24214"
},
{
"cve": "CVE-2025-24215",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24215"
},
{
"cve": "CVE-2025-24216",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24216"
},
{
"cve": "CVE-2025-24217",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24217"
},
{
"cve": "CVE-2025-24218",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24218"
},
{
"cve": "CVE-2025-24228",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24228"
},
{
"cve": "CVE-2025-24229",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24229"
},
{
"cve": "CVE-2025-24230",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24230"
},
{
"cve": "CVE-2025-24231",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24231"
},
{
"cve": "CVE-2025-24232",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24232"
},
{
"cve": "CVE-2025-24233",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24233"
},
{
"cve": "CVE-2025-24234",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24234"
},
{
"cve": "CVE-2025-24235",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24235"
},
{
"cve": "CVE-2025-24236",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24236"
},
{
"cve": "CVE-2025-24237",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24237"
},
{
"cve": "CVE-2025-24238",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24238"
},
{
"cve": "CVE-2025-24239",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24239"
},
{
"cve": "CVE-2025-24240",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24240"
},
{
"cve": "CVE-2025-24241",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24241"
},
{
"cve": "CVE-2025-24242",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24242"
},
{
"cve": "CVE-2025-24243",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24243"
},
{
"cve": "CVE-2025-24244",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24244"
},
{
"cve": "CVE-2025-24245",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24245"
},
{
"cve": "CVE-2025-24246",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24246"
},
{
"cve": "CVE-2025-24247",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24247"
},
{
"cve": "CVE-2025-24248",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24248"
},
{
"cve": "CVE-2025-24249",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24249"
},
{
"cve": "CVE-2025-24250",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24250"
},
{
"cve": "CVE-2025-24251",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24251"
},
{
"cve": "CVE-2025-24253",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24253"
},
{
"cve": "CVE-2025-24254",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24254"
},
{
"cve": "CVE-2025-24255",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24255"
},
{
"cve": "CVE-2025-24256",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24256"
},
{
"cve": "CVE-2025-24257",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24257"
},
{
"cve": "CVE-2025-24259",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24259"
},
{
"cve": "CVE-2025-24260",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24260"
},
{
"cve": "CVE-2025-24261",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24261"
},
{
"cve": "CVE-2025-24262",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24262"
},
{
"cve": "CVE-2025-24263",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24263"
},
{
"cve": "CVE-2025-24264",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24264"
},
{
"cve": "CVE-2025-24265",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24265"
},
{
"cve": "CVE-2025-24266",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24266"
},
{
"cve": "CVE-2025-24267",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24267"
},
{
"cve": "CVE-2025-24269",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24269"
},
{
"cve": "CVE-2025-24270",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24270"
},
{
"cve": "CVE-2025-24272",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24272"
},
{
"cve": "CVE-2025-24273",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24273"
},
{
"cve": "CVE-2025-24276",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24276"
},
{
"cve": "CVE-2025-24277",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24277"
},
{
"cve": "CVE-2025-24278",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24278"
},
{
"cve": "CVE-2025-24279",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24279"
},
{
"cve": "CVE-2025-24280",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24280"
},
{
"cve": "CVE-2025-24281",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24281"
},
{
"cve": "CVE-2025-24282",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24282"
},
{
"cve": "CVE-2025-24283",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24283"
},
{
"cve": "CVE-2025-27113",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-27113"
},
{
"cve": "CVE-2025-30424",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30424"
},
{
"cve": "CVE-2025-30425",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30425"
},
{
"cve": "CVE-2025-30426",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30426"
},
{
"cve": "CVE-2025-30427",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30427"
},
{
"cve": "CVE-2025-30429",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30429"
},
{
"cve": "CVE-2025-30430",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30430"
},
{
"cve": "CVE-2025-30432",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30432"
},
{
"cve": "CVE-2025-30433",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30433"
},
{
"cve": "CVE-2025-30435",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30435"
},
{
"cve": "CVE-2025-30437",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30437"
},
{
"cve": "CVE-2025-30438",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30438"
},
{
"cve": "CVE-2025-30439",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30439"
},
{
"cve": "CVE-2025-30443",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30443"
},
{
"cve": "CVE-2025-30444",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30444"
},
{
"cve": "CVE-2025-30445",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30445"
},
{
"cve": "CVE-2025-30446",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30446"
},
{
"cve": "CVE-2025-30447",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30447"
},
{
"cve": "CVE-2025-30449",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30449"
},
{
"cve": "CVE-2025-30450",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30450"
},
{
"cve": "CVE-2025-30451",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30451"
},
{
"cve": "CVE-2025-30452",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30452"
},
{
"cve": "CVE-2025-30454",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30454"
},
{
"cve": "CVE-2025-30455",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30455"
},
{
"cve": "CVE-2025-30456",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30456"
},
{
"cve": "CVE-2025-30457",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30457"
},
{
"cve": "CVE-2025-30458",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30458"
},
{
"cve": "CVE-2025-30460",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30460"
},
{
"cve": "CVE-2025-30461",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30461"
},
{
"cve": "CVE-2025-30462",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30462"
},
{
"cve": "CVE-2025-30463",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30463"
},
{
"cve": "CVE-2025-30464",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30464"
},
{
"cve": "CVE-2025-30465",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30465"
},
{
"cve": "CVE-2025-30466",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30466"
},
{
"cve": "CVE-2025-30467",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30467"
},
{
"cve": "CVE-2025-30470",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30470"
},
{
"cve": "CVE-2025-30471",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30471"
},
{
"cve": "CVE-2025-31182",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31182"
},
{
"cve": "CVE-2025-31183",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31183"
},
{
"cve": "CVE-2025-31184",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31184"
},
{
"cve": "CVE-2025-31187",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31187"
},
{
"cve": "CVE-2025-31188",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31188"
},
{
"cve": "CVE-2025-31189",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31189"
},
{
"cve": "CVE-2025-31191",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31191"
},
{
"cve": "CVE-2025-31192",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31192"
},
{
"cve": "CVE-2025-31194",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31194"
},
{
"cve": "CVE-2025-31195",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31195"
},
{
"cve": "CVE-2025-31197",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31197"
},
{
"cve": "CVE-2025-31198",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31198"
},
{
"cve": "CVE-2025-31199",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31199"
},
{
"cve": "CVE-2025-31202",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31202"
},
{
"cve": "CVE-2025-31203",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31203"
},
{
"cve": "CVE-2025-31231",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31231"
},
{
"cve": "CVE-2025-31261",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31261"
},
{
"cve": "CVE-2025-31263",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31263"
},
{
"cve": "CVE-2025-31264",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31264"
},
{
"cve": "CVE-2025-43205",
"product_status": {
"known_affected": [
"T002207",
"T042238",
"T042239",
"T042240"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-43205"
}
]
}
wid-sec-w-2025-0663
Vulnerability from csaf_certbund
Published
2025-03-31 22:00
Modified
2025-06-11 22:00
Summary
Apple iOS und iPadOS: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Das Apple iOS (vormals iPhone OS) ist das Betriebssystem für das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.
Das Apple iPadOS ist das Betriebssystem für das von Apple entwickelte iPad.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, erhöhte Rechte zu erlangen oder Daten zu manipulieren.
Betroffene Betriebssysteme
- MacOS X
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Das Apple iOS (vormals iPhone OS) ist das Betriebssystem f\u00fcr das von Apple entwickelte Smartphone iPhone, iPad und iPod Touch.\r\nDas Apple iPadOS ist das Betriebssystem f\u00fcr das von Apple entwickelte iPad.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple iOS und Apple iPadOS ausnutzen, um vertrauliche Informationen preiszugeben, beliebigen Code auszuf\u00fchren, einen Denial-of-Service-Zustand herbeizuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, erh\u00f6hte Rechte zu erlangen oder Daten zu manipulieren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- MacOS X",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0663 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0663.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0663 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0663"
},
{
"category": "external",
"summary": "About the security content of iOS 18.4 and iPadOS 18.4 vom 2025-03-31",
"url": "https://support.apple.com/en-us/122371"
},
{
"category": "external",
"summary": "About the security content of iPadOS 17.7.6 vom 2025-03-31",
"url": "https://support.apple.com/en-us/122372"
},
{
"category": "external",
"summary": "KEV Catalog CVE-2025-24085 vom 2025-01-29",
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085\u0026field_date_added_wrapper=all\u0026field_cve=\u0026sort_by=field_date_added\u0026items_per_page=20\u0026url"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20257-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021061.html"
}
],
"source_lang": "en-US",
"title": "Apple iOS und iPadOS: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-06-11T22:00:00.000+00:00",
"generator": {
"date": "2025-06-12T05:14:23.708+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2025-0663",
"initial_release_date": "2025-03-31T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-03-31T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-04-28T22:00:00.000+00:00",
"number": "2",
"summary": "CVE\u0027s erg\u00e4nzt"
},
{
"date": "2025-05-04T22:00:00.000+00:00",
"number": "3",
"summary": "CVE\u0027s erg\u00e4nzt"
},
{
"date": "2025-06-03T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-11T22:00:00.000+00:00",
"number": "5",
"summary": "CVE-Nummern erg\u00e4nzt"
}
],
"status": "final",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c18.4",
"product": {
"name": "Apple iOS \u003c18.4",
"product_id": "T042234"
}
},
{
"category": "product_version",
"name": "18.4",
"product": {
"name": "Apple iOS 18.4",
"product_id": "T042234-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:iphone_os:18.4"
}
}
}
],
"category": "product_name",
"name": "iOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c18.4",
"product": {
"name": "Apple iPadOS \u003c18.4",
"product_id": "T042235"
}
},
{
"category": "product_version",
"name": "18.4",
"product": {
"name": "Apple iPadOS 18.4",
"product_id": "T042235-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:ipados:18.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c17.7.6",
"product": {
"name": "Apple iPadOS \u003c17.7.6",
"product_id": "T042236"
}
},
{
"category": "product_version",
"name": "17.7.6",
"product": {
"name": "Apple iPadOS 17.7.6",
"product_id": "T042236-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:apple:ipados:17.7.6"
}
}
}
],
"category": "product_name",
"name": "iPadOS"
}
],
"category": "vendor",
"name": "Apple"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-48958",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-48958"
},
{
"cve": "CVE-2024-54502",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-54502"
},
{
"cve": "CVE-2024-54508",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-54508"
},
{
"cve": "CVE-2024-54534",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-54534"
},
{
"cve": "CVE-2024-54543",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-54543"
},
{
"cve": "CVE-2024-56171",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-56171"
},
{
"cve": "CVE-2024-9681",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2024-9681"
},
{
"cve": "CVE-2025-24085",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24085"
},
{
"cve": "CVE-2025-24095",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24095"
},
{
"cve": "CVE-2025-24097",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24097"
},
{
"cve": "CVE-2025-24113",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24113"
},
{
"cve": "CVE-2025-24163",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24163"
},
{
"cve": "CVE-2025-24167",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24167"
},
{
"cve": "CVE-2025-24173",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24173"
},
{
"cve": "CVE-2025-24178",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24178"
},
{
"cve": "CVE-2025-24180",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24180"
},
{
"cve": "CVE-2025-24182",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24182"
},
{
"cve": "CVE-2025-24190",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24190"
},
{
"cve": "CVE-2025-24192",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24192"
},
{
"cve": "CVE-2025-24193",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24193"
},
{
"cve": "CVE-2025-24194",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24194"
},
{
"cve": "CVE-2025-24198",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24198"
},
{
"cve": "CVE-2025-24202",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24202"
},
{
"cve": "CVE-2025-24203",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24203"
},
{
"cve": "CVE-2025-24205",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24205"
},
{
"cve": "CVE-2025-24206",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24206"
},
{
"cve": "CVE-2025-24208",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24208"
},
{
"cve": "CVE-2025-24209",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24209"
},
{
"cve": "CVE-2025-24210",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24210"
},
{
"cve": "CVE-2025-24211",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24211"
},
{
"cve": "CVE-2025-24212",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24212"
},
{
"cve": "CVE-2025-24213",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24213"
},
{
"cve": "CVE-2025-24214",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24214"
},
{
"cve": "CVE-2025-24215",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24215"
},
{
"cve": "CVE-2025-24216",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24216"
},
{
"cve": "CVE-2025-24217",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24217"
},
{
"cve": "CVE-2025-24221",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24221"
},
{
"cve": "CVE-2025-24230",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24230"
},
{
"cve": "CVE-2025-24237",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24237"
},
{
"cve": "CVE-2025-24238",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24238"
},
{
"cve": "CVE-2025-24243",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24243"
},
{
"cve": "CVE-2025-24244",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24244"
},
{
"cve": "CVE-2025-24251",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24251"
},
{
"cve": "CVE-2025-24252",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24252"
},
{
"cve": "CVE-2025-24257",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24257"
},
{
"cve": "CVE-2025-24264",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24264"
},
{
"cve": "CVE-2025-24270",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24270"
},
{
"cve": "CVE-2025-24271",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24271"
},
{
"cve": "CVE-2025-24283",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-24283"
},
{
"cve": "CVE-2025-27113",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-27113"
},
{
"cve": "CVE-2025-30425",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30425"
},
{
"cve": "CVE-2025-30426",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30426"
},
{
"cve": "CVE-2025-30427",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30427"
},
{
"cve": "CVE-2025-30428",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30428"
},
{
"cve": "CVE-2025-30429",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30429"
},
{
"cve": "CVE-2025-30430",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30430"
},
{
"cve": "CVE-2025-30432",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30432"
},
{
"cve": "CVE-2025-30433",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30433"
},
{
"cve": "CVE-2025-30434",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30434"
},
{
"cve": "CVE-2025-30436",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30436"
},
{
"cve": "CVE-2025-30438",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30438"
},
{
"cve": "CVE-2025-30439",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30439"
},
{
"cve": "CVE-2025-30445",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30445"
},
{
"cve": "CVE-2025-30447",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30447"
},
{
"cve": "CVE-2025-30454",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30454"
},
{
"cve": "CVE-2025-30456",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30456"
},
{
"cve": "CVE-2025-30463",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30463"
},
{
"cve": "CVE-2025-30465",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30465"
},
{
"cve": "CVE-2025-30466",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30466"
},
{
"cve": "CVE-2025-30467",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30467"
},
{
"cve": "CVE-2025-30469",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30469"
},
{
"cve": "CVE-2025-30470",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30470"
},
{
"cve": "CVE-2025-30471",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-30471"
},
{
"cve": "CVE-2025-31182",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31182"
},
{
"cve": "CVE-2025-31183",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31183"
},
{
"cve": "CVE-2025-31184",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31184"
},
{
"cve": "CVE-2025-31191",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31191"
},
{
"cve": "CVE-2025-31192",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31192"
},
{
"cve": "CVE-2025-31197",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31197"
},
{
"cve": "CVE-2025-31199",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31199"
},
{
"cve": "CVE-2025-31202",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31202"
},
{
"cve": "CVE-2025-31203",
"product_status": {
"known_affected": [
"T042234",
"T042235",
"T042236",
"T002207"
]
},
"release_date": "2025-03-31T22:00:00.000+00:00",
"title": "CVE-2025-31203"
}
]
}
ncsc-2025-0140
Vulnerability from csaf_ncscnl
Published
2025-04-30 08:45
Modified
2025-04-30 08:45
Summary
Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten
Apple heeft kwetsbaarheden verholpen in AirPlay, zoals gebruikt in diverse Apple-producten waaronder macOS, iOS en iPadOS.
Interpretaties
De kwetsbaarheden worden misbruikt voor het veroorzaken van een Denial-of-Service, het omzeilen van authenticatie en het uitvoeren van willekeurige code. Hiertoe dient de kwaadwillende via AirPlay vanaf een lokaal netwerk malafide content naar een kwetsbaar systeem te sturen.
De kwetsbaarheden zijn ontdekt door onderzoekers van beveiligingsbedrijf Oligo. De onderzoekers geven aan dat de kwetsbaarheden achtereenvolgens kunnen worden misbruikt voor het uitvoeren van malafide code op een systeem, zonder dat hiervoor authenticatie is vereist.
Oplossingen
Apple heeft op 31 maart updates uitgebracht om de kwetsbaarheden te verhelpen in verschillende versies van macOS, iOS en iPadOS. Ook zijn updates uigebracht voor tvOS en AirPlay SDK's. Zie bijgevoegde referenties voor meer informatie.
Kans
medium
Schade
high
CWE-863
Incorrect Authorization
CWE-416
Use After Free
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
CWE-404
Improper Resource Shutdown or Release
CWE-862
Missing Authorization
CWE-476
NULL Pointer Dereference
CWE-400
Uncontrolled Resource Consumption
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Apple heeft kwetsbaarheden verholpen in AirPlay, zoals gebruikt in diverse Apple-producten waaronder macOS, iOS en iPadOS.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden worden misbruikt voor het veroorzaken van een Denial-of-Service, het omzeilen van authenticatie en het uitvoeren van willekeurige code. Hiertoe dient de kwaadwillende via AirPlay vanaf een lokaal netwerk malafide content naar een kwetsbaar systeem te sturen.\n\nDe kwetsbaarheden zijn ontdekt door onderzoekers van beveiligingsbedrijf Oligo. De onderzoekers geven aan dat de kwetsbaarheden achtereenvolgens kunnen worden misbruikt voor het uitvoeren van malafide code op een systeem, zonder dat hiervoor authenticatie is vereist.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Apple heeft op 31 maart updates uitgebracht om de kwetsbaarheden te verhelpen in verschillende versies van macOS, iOS en iPadOS. Ook zijn updates uigebracht voor tvOS en AirPlay SDK\u0027s. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Use After Free",
"title": "CWE-416"
},
{
"category": "general",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "general",
"text": "Missing Authorization",
"title": "CWE-862"
},
{
"category": "general",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
},
{
"category": "general",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122371"
},
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122372"
},
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122373"
},
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122374"
},
{
"category": "external",
"summary": "Reference - certbundde; cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122375"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://support.apple.com/en-us/122377"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://support.apple.com/en-us/122403"
},
{
"category": "external",
"summary": "Reference - ncscclear",
"url": "https://www.oligo.security/blog/airborne"
}
],
"title": "Kwetsbaarheden verholpen in Apple AirPlay zoals gebruikt door macOS, iOS en iPadOS",
"tracking": {
"current_release_date": "2025-04-30T08:45:31.426155Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0140",
"initial_release_date": "2025-04-30T08:45:31.426155Z",
"revision_history": [
{
"date": "2025-04-30T08:45:31.426155Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/2.7.1",
"product": {
"name": "vers:apple/2.7.1",
"product_id": "CSAFPID-2783884"
}
}
],
"category": "product_name",
"name": "AirPlay audio SDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/3.6.0.126",
"product": {
"name": "vers:apple/3.6.0.126",
"product_id": "CSAFPID-2783885"
}
}
],
"category": "product_name",
"name": "AirPlay video SDK"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/r18.1",
"product": {
"name": "vers:apple/r18.1",
"product_id": "CSAFPID-2783886"
}
}
],
"category": "product_name",
"name": "CarPlay Communication Plug-in"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/18.4",
"product": {
"name": "vers:apple/18.4",
"product_id": "CSAFPID-2592051"
}
}
],
"category": "product_name",
"name": "Iphone Os"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/17.7",
"product": {
"name": "vers:apple/17.7",
"product_id": "CSAFPID-1618596"
}
},
{
"category": "product_version_range",
"name": "vers:apple/17.7.6",
"product": {
"name": "vers:apple/17.7.6",
"product_id": "CSAFPID-2592053"
}
},
{
"category": "product_version_range",
"name": "vers:apple/18.4",
"product": {
"name": "vers:apple/18.4",
"product_id": "CSAFPID-2592050"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=18.0|\u003c18.4",
"product": {
"name": "vers:unknown/\u003e=18.0|\u003c18.4",
"product_id": "CSAFPID-2620966"
}
}
],
"category": "product_name",
"name": "iPadOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:apple/13.7",
"product": {
"name": "vers:apple/13.7",
"product_id": "CSAFPID-1251566"
}
},
{
"category": "product_version_range",
"name": "vers:apple/13.7.5",
"product": {
"name": "vers:apple/13.7.5",
"product_id": "CSAFPID-2620965"
}
},
{
"category": "product_version_range",
"name": "vers:apple/14.7",
"product": {
"name": "vers:apple/14.7",
"product_id": "CSAFPID-1251568"
}
},
{
"category": "product_version_range",
"name": "vers:apple/15.4",
"product": {
"name": "vers:apple/15.4",
"product_id": "CSAFPID-2477083"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=13.0|\u003c13.7.5",
"product": {
"name": "vers:unknown/\u003e=13.0|\u003c13.7.5",
"product_id": "CSAFPID-2592055"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=14.0|\u003c14.7.5",
"product": {
"name": "vers:unknown/\u003e=14.0|\u003c14.7.5",
"product_id": "CSAFPID-2592054"
}
}
],
"category": "product_name",
"name": "macOS"
}
],
"category": "product_family",
"name": "Apple"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c18.3",
"product": {
"name": "vers:unknown/unspecified|\u003c18.3",
"product_id": "CSAFPID-1901367"
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c18.4",
"product": {
"name": "vers:unknown/unspecified|\u003c18.4",
"product_id": "CSAFPID-2590080"
}
}
],
"category": "product_name",
"name": "iOS and iPadOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003c17.7.6",
"product": {
"name": "vers:unknown/\u003c17.7.6",
"product_id": "CSAFPID-2620942",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=18.0|\u003c18.3",
"product": {
"name": "vers:unknown/\u003e=18.0|\u003c18.3",
"product_id": "CSAFPID-1923312",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003e=18.0|\u003c18.4",
"product": {
"name": "vers:unknown/\u003e=18.0|\u003c18.4",
"product_id": "CSAFPID-2620943",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1323382",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:ipados:15.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "iPad OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/unspecified|\u003c17.7",
"product": {
"name": "vers:unknown/unspecified|\u003c17.7",
"product_id": "CSAFPID-1662827"
}
}
],
"category": "product_name",
"name": "iPadOS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.3",
"product": {
"name": "vers:unknown/\u003c18.3",
"product_id": "CSAFPID-1917195",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/\u003c18.4",
"product": {
"name": "vers:unknown/\u003c18.4",
"product_id": "CSAFPID-2620937",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/unknown",
"product": {
"name": "vers:unknown/unknown",
"product_id": "CSAFPID-1317033",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "iPhone OS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/\u003c13.7.5",
"product": {
"name": "vers:unknown/\u003c13.7.5",
"product_id": "CSAFPID-2620934",
"product_identification_helper": {
"cpe": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "macOS"
}
],
"category": "vendor",
"name": "Apple"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-24126",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24126",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24126.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24126"
},
{
"cve": "CVE-2025-24129",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24129",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24129.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24129"
},
{
"cve": "CVE-2025-24131",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "other",
"text": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
"title": "CWE-120"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24131",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24131.json"
}
],
"title": "CVE-2025-24131"
},
{
"cve": "CVE-2025-24177",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24177",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24177.json"
}
],
"title": "CVE-2025-24177"
},
{
"cve": "CVE-2025-24179",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24179",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24179.json"
}
],
"title": "CVE-2025-24179"
},
{
"cve": "CVE-2025-24206",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24206",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24206.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24206"
},
{
"cve": "CVE-2025-24251",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24251",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24251.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24251"
},
{
"cve": "CVE-2025-24252",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "other",
"text": "Use After Free",
"title": "CWE-416"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24252",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24252.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24252"
},
{
"cve": "CVE-2025-24270",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"notes": [
{
"category": "other",
"text": "Exposure of Sensitive Information to an Unauthorized Actor",
"title": "CWE-200"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24270",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24270.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24270"
},
{
"cve": "CVE-2025-24271",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"notes": [
{
"category": "other",
"text": "Missing Authorization",
"title": "CWE-862"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-24271",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-24271.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-24271"
},
{
"cve": "CVE-2025-30445",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "other",
"text": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"title": "CWE-843"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-30445",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30445.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-30445"
},
{
"cve": "CVE-2025-31197",
"cwe": {
"id": "CWE-404",
"name": "Improper Resource Shutdown or Release"
},
"notes": [
{
"category": "other",
"text": "Improper Resource Shutdown or Release",
"title": "CWE-404"
},
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31197",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31197.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
}
],
"title": "CVE-2025-31197"
},
{
"cve": "CVE-2025-31202",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "other",
"text": "NULL Pointer Dereference",
"title": "CWE-476"
},
{
"category": "general",
"text": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"title": "CVSSV4"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2783884",
"CSAFPID-2783885",
"CSAFPID-2783886",
"CSAFPID-2592051",
"CSAFPID-1901367",
"CSAFPID-2590080",
"CSAFPID-2620942",
"CSAFPID-1923312",
"CSAFPID-2620943",
"CSAFPID-1323382",
"CSAFPID-1618596",
"CSAFPID-2592053",
"CSAFPID-2592050",
"CSAFPID-2620966",
"CSAFPID-1662827",
"CSAFPID-1917195",
"CSAFPID-2620937",
"CSAFPID-1317033",
"CSAFPID-1251566",
"CSAFPID-2620965",
"CSAFPID-1251568",
"CSAFPID-2477083",
"CSAFPID-2620934",
"CSAFPID-2592055",
"CSAFPID-2592054"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-31202",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-31202.json"
}
],
"title": "CVE-2025-31202"
}
]
}
fkie_cve-2025-31202
Vulnerability from fkie_nvd
Published
2025-04-29 03:15
Modified
2025-05-05 20:07
Severity ?
Summary
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| product-security@apple.com | https://support.apple.com/en-us/122371 | Release Notes, Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/122373 | Release Notes, Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/122377 | Release Notes, Vendor Advisory | |
| product-security@apple.com | https://support.apple.com/en-us/122378 | Release Notes, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
"matchCriteriaId": "6B3450F7-7B4A-46CE-A6E0-BBE6569F2EBF",
"versionEndExcluding": "18.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0D9C73F9-FEF4-4FC1-B83D-56566AD35990",
"versionEndExcluding": "18.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E3BD0A90-23F1-430A-8119-E14055F7E621",
"versionEndExcluding": "15.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8C61CCC2-87D3-4A3A-837B-63C48299A7AD",
"versionEndExcluding": "18.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E82603D7-A630-4B9B-9C51-880667F05EC7",
"versionEndExcluding": "2.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service."
},
{
"lang": "es",
"value": "Se solucion\u00f3 una desreferencia de puntero nulo mejorando la validaci\u00f3n de entrada. Este problema se solucion\u00f3 en iOS 18.4 y iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4 y visionOS 2.4. Un atacante en la red local podr\u00eda provocar una denegaci\u00f3n de servicio."
}
],
"id": "CVE-2025-31202",
"lastModified": "2025-05-05T20:07:59.807",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2025-04-29T03:15:35.040",
"references": [
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/122371"
},
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/122373"
},
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/122377"
},
{
"source": "product-security@apple.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://support.apple.com/en-us/122378"
}
],
"sourceIdentifier": "product-security@apple.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-476"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
ghsa-vmwg-3cwg-gccp
Vulnerability from github
Published
2025-04-29 03:30
Modified
2025-04-29 18:30
Severity ?
VLAI Severity ?
Details
A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.
{
"affected": [],
"aliases": [
"CVE-2025-31202"
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-04-29T03:15:35Z",
"severity": "MODERATE"
},
"details": "A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4. An attacker on the local network may be able to cause a denial-of-service.",
"id": "GHSA-vmwg-3cwg-gccp",
"modified": "2025-04-29T18:30:57Z",
"published": "2025-04-29T03:30:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31202"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122371"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122373"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122377"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/122378"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…