7.5

CVE-2025-24129

A type confusion issue was addressed with improved checks. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A remote attacker may cause an unexpected app termination.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPadOS Version < 18.3
Apple ≫ iPhone OS Version < 18.3
Apple ≫ macOS Version < 15.3
Apple ≫ tvOS Version < 18.3
Apple ≫ visionOS Version < 2.3
Apple ≫ watchOS Version < 11.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.53% 0.664
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

https://support.apple.com/en-us/122066
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122068
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122071
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122072
Vendor Advisory
Release Notes
https://support.apple.com/en-us/122073
Vendor Advisory
Release Notes