CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability

Q: What is the severity of CVE-2025-31200?

CVE-2025-31200 is a critical memory corruption vulnerability that can lead to code execution when processing malicious audio streams.

Q: How do I fix CVE-2025-31200?

CVE-2025-31200 can be fixed by updating to the latest versions of affected software: tvOS 18.4.1, visionOS 2.4.1, iOS 18.4.1, iPadOS 18.4.1, and macOS Sequoia 15.4.1.

Q: What products are affected by CVE-2025-31200?

CVE-2025-31200 affects Apple products that include tvOS, visionOS, iOS, iPadOS, and macOS Sequoia.

Q: What types of attacks can exploit CVE-2025-31200?

CVE-2025-31200 can be exploited through specially crafted media files that target memory corruption vulnerabilities.

Q: What should users do if they are vulnerable to CVE-2025-31200?

Users vulnerable to CVE-2025-31200 should immediately update their devices to the latest available software versions provided by Apple.

Published Apr 16, 2025

Updated

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

Credit

Apple, Google Threat Analysis Group, Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), Guilherme Rambo(Best Buddy Apps), Saagar Jha, Tony Iskow@@Tybbow, Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Lucas Leong@@_wmliang_(Trend Micro Zero Day Initiative), Christian Kohlschütter, CVE-2024-8176, Paweł Płatek (Trail(Bits), Dave G., Eric Dorphy(Twin Cities App Dev LLC), Google V8 Security Team, Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), wac(Trend Micro Zero Day Initiative), rheza@@ginggilBesel(Palo Alto Networks), Edouard Bochin@@le_douds(Palo Alto Networks), Tao Yan@@Ga1ois(Palo Alto Networks), Nan Wang@@eternalsakura13, Ignacio Sanmillan@@ulexec, Jiming Wang, Jikai Ren, Yuhao Hu, Yan Kang, Chenggang Wu, Xiaojie Wei, Ivan Fratric(Google Project Zero), Juergen Schmied(Lynck GmbH), jioundai(360 Vulnerability Research Institute), chen fengjiao(HBC)

Affected Software

13 affected componentsFixes available

Apple tvOS<18.4.1

18.4.1

Apple Multiple Products

Apple macOS Sequoia<15.4.1

15.4.1

Apple visionOS<2.4.1

2.4.1

Apple iOS<18.4.1

18.4.1

Apple iPadOS<18.4.1

18.4.1

Apple WatchOS<11.5

11.5

Apple macOS>=15.0<15.4.1

Apple tvOS<18.4.1

Apple visionOS<2.4.1

Apple iPadOS<18.4.1

Apple iPhone OS<18.4.1

Apple WatchOS<11.5

Remediation

Information

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Event History

Apr 16, 2025

News Published

via BleepingComputer·06:06 PM

News Published

via BleepingComputer·06:08 PM

CVE Published

via MITRE·06:24 PM

Data Sourced

via MITRE·06:24 PM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Apr 17, 2025

Known Exploited

via CISA·12:00 AM

News Published

via ZDNet·09:16 AM

News Published

via ZDNet·10:18 AM

May 12, 2025

Data Sourced

via Apple·12:00 AM

DescriptionWeaknessAffected Software

Updated

via Apple·12:00 AM

DescriptionWeakness

Jul 30, 2025

News Published

via BleepingComputer·04:10 PM

Sep 16, 2025

News Published

via BleepingComputer·12:16 PM

Dec 12, 2025

News Published

via BleepingComputer·11:23 PM

Frequently Asked Questions

What is the severity of CVE-2025-31200?

CVE-2025-31200 is a critical memory corruption vulnerability that can lead to code execution when processing malicious audio streams.

How do I fix CVE-2025-31200?

CVE-2025-31200 can be fixed by updating to the latest versions of affected software: tvOS 18.4.1, visionOS 2.4.1, iOS 18.4.1, iPadOS 18.4.1, and macOS Sequoia 15.4.1.

What products are affected by CVE-2025-31200?

CVE-2025-31200 affects Apple products that include tvOS, visionOS, iOS, iPadOS, and macOS Sequoia.

What types of attacks can exploit CVE-2025-31200?

CVE-2025-31200 can be exploited through specially crafted media files that target memory corruption vulnerabilities.

What should users do if they are vulnerable to CVE-2025-31200?

Users vulnerable to CVE-2025-31200 should immediately update their devices to the latest available software versions provided by Apple.

CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability

Credit

Affected Software

Remediation

Information

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-31200?

How do I fix CVE-2025-31200?

What products are affected by CVE-2025-31200?

What types of attacks can exploit CVE-2025-31200?

What should users do if they are vulnerable to CVE-2025-31200?

Company

Resources

Contact