CRITICAL

CVE-2025-24085

Apple Ipados 2025-01-27 CVSS v3.1

CVSS

10

KEV

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Summary dbcve.org

A use-after-free vulnerability in Apple operating systems allows a malicious application to elevate privileges, potentially to root or kernel level. The vulnerability has been actively exploited in the wild against iOS versions prior to iOS 17.2.

Mitigation

Apply available Apple security updates (iOS 18.3/iPadOS 18.3/17.7.6, macOS Sequoia 15.3/Sonoma 14.7.5/Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3) to all affected devices immediately.

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

17.65%

Probability of exploitation in next 30 days

97.1th percentile

References

https://support.apple.com/en-us/122066 Release Notes, Vendor Advisory https://support.apple.com/en-us/122068 Release Notes, Vendor Advisory https://support.apple.com/en-us/122071 Release Notes, Vendor Advisory https://support.apple.com/en-us/122072 Release Notes, Vendor Advisory https://support.apple.com/en-us/122073 Release Notes, Vendor Advisory https://support.apple.com/en-us/122372 Release Notes, Vendor Advisory https://support.apple.com/en-us/122374 Release Notes, Vendor Advisory https://support.apple.com/en-us/122375 Release Notes, Vendor Advisory http://seclists.org/fulldisclosure/2025/Apr/10 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Apr/5 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Apr/9 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jan/12 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jan/13 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jan/15 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jan/19 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jun/19 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/1 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/23 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/30 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/31 Mailing List, Third Party Advisory https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201 Third Party Advisory https://github.com/cisagov/vulnrichment/issues/194 Issue Tracking https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.