Medium severity6.6NVD Advisory· Published Mar 31, 2025· Updated Jun 17, 2026

CVE-2025-24198

Description

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An attacker with physical access may be able to use Siri to access sensitive user data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iOSllm-fuzzy
Range: iOS 18.4
Apple Inc./Ipadosllm-fuzzy2 versions
iPadOS 18.4, iPadOS 17.7.6+ 1 more
- (no CPE)range: iPadOS 18.4, iPadOS 17.7.6
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*range: <17.7.6
Apple Inc./macOS Sequoiallm-fuzzy
Range: macOS Sequoia 15.4
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <18.4
Apple Inc./macOS
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Range: >=13.0,<13.7.5

Patches

Vulnerability mechanics

References

support.apple.com/en-us/122371nvdVendor Advisory
support.apple.com/en-us/122372nvdVendor Advisory
support.apple.com/en-us/122373nvdVendor Advisory
support.apple.com/en-us/122374nvdVendor Advisory
support.apple.com/en-us/122375nvdVendor Advisory
seclists.org/fulldisclosure/2025/Apr/10nvd
seclists.org/fulldisclosure/2025/Apr/4nvd
seclists.org/fulldisclosure/2025/Apr/5nvd
seclists.org/fulldisclosure/2025/Apr/8nvd
seclists.org/fulldisclosure/2025/Apr/9nvd

News mentions

No linked articles in our index yet.

cvss	0.429
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000