CVE-2025-24160

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 27, 2025
Updated: Jan 28, 2025
CWE ID 404

Summary

CVE-2025-24160 is a recently identified vulnerability that, when exploited, can lead to unexpected app terminations upon parsing a file. This issue has been addressed through improved checks and is now fixed in several Apple operating systems, including iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3, and iPadOS 18.3, as well as macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3. The specific cause of the vulnerability and the consequences of its exploitation have not been disclosed in detail. Users are encouraged to update their devices to the latest software versions to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share