CRITICAL

CVE-2025-31200

Apple macOS 2025-04-16 CVSS v3.1

CVSS

9.8

KEV

Description

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

Summary dbcve.org

Memory corruption vulnerability in Apple media frameworks (audio stream processing) that allows code execution when processing maliciously crafted media files. The issue was addressed with improved bounds checking, indicating a buffer overflow or similar memory safety flaw in the audio processing code path.

Mitigation

Apply vendor-supplied security updates immediately: iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, and watchOS 11.5. Given confirmed in-the-wild exploitation against targeted individuals, prioritize patching of exposed devices as urgent.

Proof of Concept

Weakness (CWE)

CWE-119 Memory Buffer Bounds Error

EPSS Score

18.59%

Probability of exploitation in next 30 days

97.1th percentile

References

https://support.apple.com/en-us/122282 Release Notes, Vendor Advisory https://support.apple.com/en-us/122400 Release Notes, Vendor Advisory https://support.apple.com/en-us/122401 Release Notes, Vendor Advisory https://support.apple.com/en-us/122402 Release Notes, Vendor Advisory https://support.apple.com/en-us/122722 Release Notes, Vendor Advisory http://seclists.org/fulldisclosure/2025/Apr/26 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Jun/14 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/May/10 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/0 Mailing List, Third Party Advisory http://seclists.org/fulldisclosure/2025/Oct/4 Mailing List, Third Party Advisory https://blog.noahhw.dev/posts/cve-2025-31200/ Broken Link, Exploit https://news.ycombinator.com/item?id=44161894 Issue Tracking https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md Broken Link, Exploit https://github.com/cisagov/vulnrichment/issues/200 Issue Tracking https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE