CVE-2025-24194

A logic issue was addressed with improved checks. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may result in the disclosure of process memory.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

History

07 Apr 2025, 13:44

Type Values Removed Values Added
References () https://support.apple.com/en-us/122371 - () https://support.apple.com/en-us/122371 - Vendor Advisory
References () https://support.apple.com/en-us/122373 - () https://support.apple.com/en-us/122373 - Vendor Advisory
References () https://support.apple.com/en-us/122377 - () https://support.apple.com/en-us/122377 - Vendor Advisory
References () https://support.apple.com/en-us/122378 - () https://support.apple.com/en-us/122378 - Vendor Advisory
First Time Apple iphone Os
Apple
Apple tvos
Apple visionos
Apple ipados
Apple macos
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*

02 Apr 2025, 16:17

Type Values Removed Values Added
Summary
  • (es) Se solucionó un problema lógico mejorando las comprobaciones. Este problema se solucionó en visionOS 2.4, iOS 18.4 y iPadOS 18.4, tvOS 18.4 y macOS Sequoia 15.4. El procesamiento de contenido web malintencionado puede provocar la divulgación de memoria del proceso.
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5

31 Mar 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-31 23:15

Updated : 2025-04-07 13:44


NVD link : CVE-2025-24194

Mitre link : CVE-2025-24194

CVE.ORG link : CVE-2025-24194


JSON object : View

Products Affected

apple

  • macos
  • visionos
  • tvos
  • ipados
  • iphone_os