[ CVE-2025-24085 · Published 27 Jan 2025 ]
Apple Multiple Products Use-After-Free Vulnerability
[ Why it matters ]Priority signals
- Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2025-01-29
- EPSS: 18% chance of exploitation in the next 30 days (higher than 97% of CVEs)
- Critical severity: CVSS 10.0
[ Description ]Official description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.
CISA: Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.
[ Fixes ]Fixes and patches
CISA required action (US federal deadline 19 Feb 2025): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ References ]References
- support.apple.com/en-us/122066Release NotesVendor Advisory
- support.apple.com/en-us/122068Release NotesVendor Advisory
- support.apple.com/en-us/122071Release NotesVendor Advisory
- support.apple.com/en-us/122072Release NotesVendor Advisory
- support.apple.com/en-us/122073Release NotesVendor Advisory
- support.apple.com/en-us/122372Release NotesVendor Advisory
- support.apple.com/en-us/122374Release NotesVendor Advisory
- support.apple.com/en-us/122375Release NotesVendor Advisory
- seclists.org/fulldisclosure/2025/Apr/10Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Apr/5Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Apr/9Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Jan/12Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Jan/13Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Jan/15Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Jan/19Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Jun/19Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Oct/1Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Oct/23Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Oct/30Mailing ListThird Party Advisory
- seclists.org/fulldisclosure/2025/Oct/31Mailing ListThird Party Advisory
- github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201Third Party Advisory
- github.com/cisagov/vulnrichment/issues/194Issue Tracking
- www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource