A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/122371 | Vendor Advisory |
| https://support.apple.com/en-us/122372 | Vendor Advisory |
| https://support.apple.com/en-us/122373 | Vendor Advisory |
| https://support.apple.com/en-us/122377 | Vendor Advisory |
| https://support.apple.com/en-us/122379 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Apr 2025, 13:41
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References | () https://support.apple.com/en-us/122371 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122372 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122373 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122377 - Vendor Advisory | |
| References | () https://support.apple.com/en-us/122379 - Vendor Advisory | |
| First Time |
Apple macos
Apple safari Apple iphone Os Apple tvos Apple Apple ipados |
|
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
01 Apr 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.0 |
31 Mar 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-31 23:15
Updated : 2025-04-07 13:41
NVD link : CVE-2025-24209
Mitre link : CVE-2025-24209
CVE.ORG link : CVE-2025-24209
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- safari
- macos
- tvos
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')