CVE-2025-31201: Apple Multiple Products Arbitrary Read and Write Vulnerability
Published Apr 16, 2025
·Updated
Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.
Credit
Apple, Google Threat Analysis Group
Affected Software
11 affected componentsFixes available
Apple tvOS<18.4.1
18.4.1
Apple Multiple Products
Apple macOS Sequoia<15.4.1
15.4.1
Apple visionOS<2.4.1
2.4.1
Apple iOS<18.4.1
18.4.1
Apple iPadOS<18.4.1
18.4.1
Apple macOS>=15.0<15.4.1
Apple tvOS<18.4.1
Apple visionOS<2.4.1
Apple iPadOS<18.4.1
Apple iPhone OS<18.4.1
Remediation
Information
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Event History
Apr 16, 2025
News Published
via BleepingComputer·06:06 PM
News Published
via BleepingComputer·06:08 PM
CVE Published
via MITRE·06:24 PM
Data Sourced
via MITRE·06:24 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Apr 17, 2025
Known Exploited
via CISA·12:00 AM
News Published
via ZDNet·09:16 AM
News Published
via ZDNet·10:18 AM
Jul 30, 2025
News Published
via BleepingComputer·04:10 PM
Sep 16, 2025
News Published
via BleepingComputer·12:16 PM
Dec 12, 2025
News Published
via BleepingComputer·11:23 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-31201?
CVE-2025-31201 is considered a high severity vulnerability due to its memory corruption issue.
2
How do I fix CVE-2025-31201?
To fix CVE-2025-31201, update your device to macOS Sequoia 15.4.1, visionOS 2.4.1, or iOS/iPadOS/tvOS 18.4.1.
3
What types of devices are affected by CVE-2025-31201?
CVE-2025-31201 affects devices running macOS Sequoia, iOS, iPadOS, tvOS, and visionOS before the specified updates.
4
Is there a specific patch for CVE-2025-31201?
Yes, CVE-2025-31201 is patched in the latest updates: macOS Sequoia 15.4.1, visionOS 2.4.1, and iOS/iPadOS/tvOS 18.4.1.
5
What is the nature of the vulnerability in CVE-2025-31201?
CVE-2025-31201 involves a memory corruption issue in CoreAudio that was addressed with improved bounds checking.