This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Apple fixes 2 vulnerabilities

Apple fixes 2 vulnerabilities in the operating systems of some of its products [1][2][3][4]. The company is aware of possible active exploitation of these vulnerabilities in extremely sophisticated attacks against specifically targeted individuals. Operating systems and their fixed versions: iOS and iPadOS - 18.4.1 [1]; macOS - 15.4.1 [2]; tvOS - 18.4.1 [3]; visionOS - 2.4.1 [4].

Apple iOS, iPadOS, macOS, tvOS, visionOS - RCE (CVE-2025-31200)
CVSS 7.5 (High)

Allows an unauthenticated remote attacker, using social engineering, to deliver a specially crafted audio file whose processing by the CoreAudio component may lead to code execution [5].

The vulnerability is present in products:

  • iOS:iOS;<18.4.1;
  • iPadOS:iPadOS;<18.4.1;
  • macOS:macOS;>=15.0,<15.4.1;
  • tvOS:tvOS;<18.4.1;
  • visionOS:visionOS;<2.4.1;

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 16. 4. 2025.

Apple iOS, iPadOS, macOS, tvOS, visionOS - memory security bypass (CVE-2025-31201)
CVSS 6.8 (Medium)

Allows an authenticated remote attacker with arbitrary memory read and write capability to bypass the Pointer Authentication (PAC) memory protection mechanism.

The vulnerability is present in products:

  • iOS:iOS;<18.4.1;
  • iPadOS:iPadOS;<18.4.1;
  • macOS:macOS;>=15.0,<15.4.1;
  • visionOS:visionOS;<2.4.1;

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

More information:

The vulnerability was publicly disclosed 16. 4. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 17. 4. 2025.

CESNET, z.s.p.o. Logo