CVE-2025-0509

Summary

CVE-2025-0509 is a vulnerability affecting Sparkle, a software update framework used by various macOS applications, before version 2.6.4. This issue allows an attacker to replace a legitimate signed update with a malicious payload, thereby bypassing Sparkle's (Ed)DSA signing checks and potentially installing unauthorized software on the user's system. This poses a serious threat to user security, as the compromised updates may appear trustworthy due to their signatures. It is strongly recommended to update to the latest version of Sparkle to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.