VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jan 27, 2025· Updated Jun 17, 2026

CVE-2025-24149

CVE-2025-24149

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Parsing a file may lead to disclosure of user information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Apple Inc./Ipados2 versions
    cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.7.4
    • (no CPE)range: prior to 18.3, prior to 17.7.4
  • Apple Inc./Iphone OS
    cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <18.3
  • Apple Inc./macOS2 versions
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*range: <13.7.3
    • (no CPE)range: prior to 15.3, prior to 14.7.3, prior to 13.7.3
  • Apple Inc./tvOS
    cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
    Range: <18.3
  • Apple Inc./Visionos
    cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*
    Range: <2.3
  • Apple Inc./watchOS
    cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
    Range: <11.3
  • Apple Inc./iOSllm-fuzzy
    Range: prior to 18.3

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.