CVE-2025-31241

medium

Description

A double free issue was addressed with improved memory management. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may cause an unexpected app termination.

References

https://support.apple.com/en-us/122722

https://support.apple.com/en-us/122721

https://support.apple.com/en-us/122720

https://support.apple.com/en-us/122718

https://support.apple.com/en-us/122717

https://support.apple.com/en-us/122716

https://support.apple.com/en-us/122405

https://support.apple.com/en-us/122404

Details

Source: Mitre, NVD

Published: 2025-05-12

Updated: 2025-05-13

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Severity: Medium

EPSS

EPSS: 0.00071