All vulnerabilities
CVE-2025-31200

Apple Multiple Products Memory Corruption Vulnerability

Apple Multiple Products
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationExploited in the wildAdded to KEV 17 Apr 2025CISA KEV
Exploit odds (EPSS)20.9%Chance of exploitation activity in the next 30 days, higher than 97% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in18.4.1Also 15.4.1, 2.4.1 and 1 moreCVE List
Federal deadline8 May 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 16 Apr 2025, 18:24 UTCPublishedCVE List
  2. 17 Apr 2025Added to CISA KEVCISA KEV

Description

Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

Text from CVE List

Affected versions 5

  • iOS and iPadOSaffected: all versions before 18.4.1CVE List
  • macOSaffected: all versions before 15.4.1CVE List
  • tvOSaffected: all versions before 18.4.1CVE List
  • visionOSaffected: all versions before 2.4.1CVE List
  • watchOSaffected: all versions before 11.5CVE List

References 11