CVE-2025-31208: Double Free
Published May 12, 2025
·Updated
afpfs. The issue was addressed with improved memory handling.
Credit
Joseph Ravichandran@@0xjprx(MIT CSAIL), Dave G., Hossein Lotfi@@hosselot(Trend Micro Zero Day Initiative), Dillon Franke(Google Project Zero), wac(Trend Micro Zero Day Initiative), Csaba Fitzl@@theevilbit(Kandji), an anonymous researcher, Lyutoon(Atredis Partners), YenKoc(Atredis Partners), Dayton Pidhirney(Atredis Partners), Mateusz Krzywicki@@krzywix, Michael DePlante@@izobashi(Trend Micro Zero Day Initiative), Lucas Leong@@_wmliang_(Trend Micro Zero Day Initiative), Christian Kohlschütter, CVE-2024-8176, Paweł Płatek (Trail(Bits), LFY@@secsys(Fudan University), CVE-2025-26465, CVE-2025-26466, wac, Kirin@@Pwnrin, 7feilee, Eric Dorphy(Twin Cities App Dev LLC), Adam M., Lyutoon, YenKoc, Guilherme Rambo(Best Buddy Apps), Apple, Google Threat Analysis Group, Saagar Jha, Tony Iskow@@Tybbow, Google V8 Security Team, Andreas Jaegersberger & Ro Achterberg(Nosebeard Labs), rheza@@ginggilBesel(Palo Alto Networks), Edouard Bochin@@le_douds(Palo Alto Networks), Tao Yan@@Ga1ois(Palo Alto Networks), Nan Wang@@eternalsakura13, Ignacio Sanmillan@@ulexec, Jiming Wang, Jikai Ren, Yuhao Hu, Yan Kang, Chenggang Wu, Xiaojie Wei, Ivan Fratric(Google Project Zero), Juergen Schmied(Lynck GmbH), jioundai(360 Vulnerability Research Institute), chen fengjiao(HBC), Ron Masas(BREAKPOINT), Wang Yu(Cyberserval), Andrew James Gonzalez, Richard Hyunho Im@@richeeta, Andr.Ess, Noah Gregory (wts.dev), Thibaud Kehler, 秦若涵, 崔志伟, 崔宝江, Deval Jariwala, Dalibor Milanovic, YingQi Shi@@Mas0nShi(DBAppSecurity's WeBin lab), Duy Trần@@khanhduytran0, Shehab Khan, CertiK@@CertiK, Thomas Völkl@@vollkorntomate, SEEMOO, TU Darmstadt, Kirin@@Pwnrin(Fudan University), Bohdan Stasiuk@@bohdan_stasiuk, Sourabhkumar Mishra, @@RenwaX23, Ryan Dowd@@_rdowd
Affected Software
18 affected componentsFixes available
Apple macOS Sonoma<14.7.6
14.7.6
Apple macOS Sequoia<15.5
15.5
Apple tvOS<18.5
18.5
Apple visionOS<2.5
2.5
Apple iOS<18.5
18.5
Apple iPadOS<18.5
18.5
Apple WatchOS<11.5
11.5
Apple macOS Ventura<13.7.6
13.7.6
Apple iPadOS<17.7.7
17.7.7
Apple iPadOS<17.7.7
Apple iPadOS>=18.0<18.5
Apple iPhone OS<18.5
Apple macOS<13.7.6
Apple macOS>=14.0<14.7.6
Apple macOS>=15.0<15.5
Apple tvOS<18.5
Apple visionOS<2.5
Apple WatchOS<11.5
Event History
May 12, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
Affected Software
CVE Published
via MITRE·09:42 PM
Data Sourced
via MITRE·09:42 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Is there any workaround for CVE-2025-31208?
No specific workaround for CVE-2025-31208 has been published, and applying the updates remains the recommended approach.