CVE-2025-31239

CVSS 4.3 MEDIUMEPSS 0.5%CWE-416

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 4.3EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 may 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Productos afectados

Apple · iOS and iPadOS Apple · iPadOS Apple · macOS Apple · tvOS Apple · visionOS Apple · watchOS

Referencias

http://seclists.org/fulldisclosure/2025/May/11 http://seclists.org/fulldisclosure/2025/May/12 http://seclists.org/fulldisclosure/2025/May/5 http://seclists.org/fulldisclosure/2025/May/6 http://seclists.org/fulldisclosure/2025/May/7 http://seclists.org/fulldisclosure/2025/May/8 http://seclists.org/fulldisclosure/2025/May/9 https://support.apple.com/en-us/122404 https://support.apple.com/en-us/122405 https://support.apple.com/en-us/122716 https://support.apple.com/en-us/122717 https://support.apple.com/en-us/122718