CVE-2025-31234

CVE-2025-31234 is a memory corruption vulnerability affecting multiple Apple platforms. The issue stems from improper input sanitization, which allows specially crafted input to corrupt memory. On macOS, the attack vector is connecting to a malicious AFP server, while on iOS, iPadOS, tvOS, and visionOS, the vector is processing a maliciously crafted media file. [1][2][3][4]

Exploitation requires the user to either connect to a malicious AFP server (on macOS) or process a crafted media file (on other platforms). No additional authentication is needed beyond the user performing the action. The vulnerability can lead to unexpected system termination or corruption of kernel memory. [1][2]

The impact of successful exploitation ranges from denial-of-service (system termination) to more severe kernel memory corruption, which could potentially enable arbitrary code execution at the kernel level. Apple addresses the issue in iOS 18.5, iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, and visionOS 2.5. No workarounds are mentioned; upgrading to the patched versions is the recommended mitigation. [1][2][3][4]