CVE-2025-30432
CVSS 3.1 Score 6.4 of 10 (medium)
Details
Published Mar 31, 2025
Updated: Apr 7, 2025
CWE ID 287
Summary
CVE-2025-30432 is a logic issue concerning improper state management in Apple's visionOS, macOS Ventura, tvOS, iPadOS, and iOS. This vulnerability, now patched in versions 2.4, 13.7.5, 18.4, 17.7.6, and 18.4 respectively, allows a malicious app to trigger time delays after four consecutive failed passcode attempts on a locked device. Successful exploitation of this weakness could result in significant delays, potentially hindering the legitimate user's access to their device.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.