CVE-2025-31209
Last modified
CVE-2025-31209 is a medium-severity vulnerability rated 6.3/10 on the CVSS scale. An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. EPSS estimates a 0.65% chance of exploitation in the next 30 days.
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to disclosure of user information.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 17.7.7 |
| Apple | Ipados | >= 18.0, < 18.5 |
| Apple | Iphone Os | < 18.5 |
| Apple | Macos | < 13.7.6 |
| Apple | Macos | >= 14.0, < 14.7.6 |
| Apple | Macos | >= 15.0, < 15.5 |
| Apple | Tvos | < 18.5 |
| Apple | Visionos | < 2.5 |
| Apple | Watchos | < 11.5 |
References
- https://support.apple.com/en-us/122404Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122405Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122716Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122717Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122718Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122720Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122721Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122722Release Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-31209?
How severe is CVE-2025-31209?
How do I fix CVE-2025-31209?
Are you affected by CVE-2025-31209?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST