ByteOS

Product

AirPlay audio SDK

Versions

Affected

From 0 before 2.7.1 (custom)

Vendor

Product

AirPlay video SDK

Versions

Affected

From 0 before 2.7.1 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	An attacker on the local network may cause an unexpected app termination

Type: N/A

CWE ID: N/A

Description: An attacker on the local network may cause an unexpected app termination

References

Hyperlink	Resource
https://support.apple.com/en-us/122403	N/A

Hyperlink: https://support.apple.com/en-us/122403

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Type: CWE

CWE ID: CWE-120

Description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Metrics

Version	Base score	Base severity	Vector
3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:30 Apr, 2025 | 21:15

Updated At:02 Apr, 2026 | 19:19

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

cpe:2.3:a:apple:airplay_audio_software_development_kit:*:*:*:*:*:*:*:*

>>airplay_audio_software_development_kit>>Versions before 2.7.1(exclusive)

cpe:2.3:a:apple:airplay_video_software_development_kit:*:*:*:*:*:*:*:*

>>airplay_video_software_development_kit>>Versions before 3.6.0.126(exclusive)

cpe:2.3:a:apple:carplay_communication_plug-in:*:*:*:*:*:*:*:*

>>carplay_communication_plug-in>>Versions before r18.1(exclusive)

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	nvd@nist.gov
CWE-120	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-120

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-120

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://support.apple.com/en-us/122403	product-security@apple.com	Vendor Advisory

Hyperlink: https://support.apple.com/en-us/122403

Source: product-security@apple.com

Resource:

Vendor Advisory

Similar CVEs

199Records found

CVE-2025-24251

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.59%

7 Day CHG+0.01%

Published-29 Apr, 2025 | 02:05

Updated-02 Apr, 2026 | 19:19

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An attacker on the local network may cause an unexpected app termination.

Vendor-Apple Inc.

Product-tvos visionos watchos macos iphone_os ipados visionOS macOS tvOS iOS and iPadOS iPadOS watchOS

CWE ID-CWE-476

NULL Pointer Dereference

CVE-2025-43424

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.03% / 7.41%

7 Day CHG~0.00%

Published-04 Nov, 2025 | 01:15

Updated-02 Apr, 2026 | 19:20

The issue was addressed with improved bounds checks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1. A malicious HID device may cause an unexpected process crash.

Vendor-Apple Inc.

Product-iphone_os ipados macOS iOS and iPadOS

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2025-30445

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.24% / 47.54%

7 Day CHG~0.00%

Published-29 Apr, 2025 | 02:05

Updated-02 Apr, 2026 | 19:19

A type confusion issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An attacker on the local network may cause an unexpected app termination.

Vendor-Apple Inc.

Product-tvos visionos macos iphone_os ipados visionOS macOS tvOS iOS and iPadOS iPadOS

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2025-31203

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.65%

7 Day CHG+0.05%

Published-29 Apr, 2025 | 02:05

Updated-02 Apr, 2026 | 19:19

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An attacker on the local network may be able to cause a denial-of-service.

Vendor-Apple Inc.

Product-tvos visionos watchos macos iphone_os ipados visionOS macOS tvOS iOS and iPadOS iPadOS watchOS

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2025-24132

Matching Score-8

Assigner-Apple Inc.

Product-airplay_video_software_development_kit carplay_communication_plug-in airplay_audio_software_development_kit AirPlay audio SDK AirPlay video SDK

Matching Score-8

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.05% / 14.80%

7 Day CHG~0.00%

Published-30 Apr, 2025 | 20:48

Updated-02 Apr, 2026 | 19:19

The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.

Vendor-Apple Inc.

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2015-3717

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-1.85% / 83.22%

7 Day CHG~0.00%

Published-03 Jul, 2015 | 01:00

Updated-06 May, 2026 | 22:30

Multiple buffer overflows in the printf functionality in SQLite, as used in Apple iOS before 8.4 and OS X before 10.10.4, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Vendor-sqlite n/a Apple Inc.

Product-sqlite iphone_os mac_os_x n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8511

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.36% / 58.64%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:17

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious application may be able to elevate privileges.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos watchOS macOS iOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-24131

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 34.85%

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:46

Updated-02 Apr, 2026 | 19:19

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3. An attacker on the local network may be able to cause a denial-of-service.

Vendor-Apple Inc.

Product-tvos visionos watchos macos iphone_os ipados visionOS macOS tvOS iOS and iPadOS iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-24266

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.28% / 51.30%

7 Day CHG+0.05%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-24209

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7||HIGH

EPSS-0.56% / 68.42%

7 Day CHG~0.00%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected process crash.

Vendor-Apple Inc.

Product-tvos safari macos iphone_os ipados Safari macOS tvOS iOS and iPadOS iPadOS watchOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-24153

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.07% / 20.71%

7 Day CHG~0.00%

Published-27 Jan, 2025 | 21:45

Updated-02 Apr, 2026 | 18:10

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-24157

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-5.6||MEDIUM

EPSS-0.17% / 37.37%

7 Day CHG-0.24%

Published-31 Mar, 2025 | 22:23

Updated-02 Apr, 2026 | 19:19

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to cause unexpected system termination or corrupt kernel memory.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2015-0973

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-8.8||HIGH

EPSS-2.01% / 83.88%

7 Day CHG~0.00%

Published-18 Jan, 2015 | 18:00

Updated-06 May, 2026 | 22:30

Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent attackers to execute arbitrary code via IDAT data with a large width, a different vulnerability than CVE-2014-9495.

Vendor-libpng n/a Oracle Corporation Apple Inc.

Product-solaris libpng mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26981

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.37% / 58.74%

7 Day CHG~0.00%

Published-13 Mar, 2022 | 00:00

Updated-03 Aug, 2024 | 05:18

Liblouis through 3.21.0 has a buffer overflow in compilePassOpcode in compileTranslationTable.c (called, indirectly, by tools/lou_checktable.c).

Vendor-liblouis n/a Fedora Project Apple Inc.

Product-iphone_os liblouis watchos ipados tvos fedora macos n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26750

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:12

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26741

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:04

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26742

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:05

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26752

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:14

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26754

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:15

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26753

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:14

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-26749

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.45% / 63.92%

7 Day CHG~0.00%

Published-26 May, 2022 | 19:11

Updated-03 Aug, 2024 | 05:11

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.4. An application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-39869

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.04% / 12.17%

7 Day CHG~0.00%

Published-11 May, 2026 | 20:08

Updated-12 May, 2026 | 19:16

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing an audio stream in a maliciously crafted media file may terminate the process.

Vendor-Apple Inc.

Product-watchOS iOS and iPadOS visionOS tvOS macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2025-12440

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-6

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-5.3||MEDIUM

EPSS-0.03% / 8.75%

7 Day CHG~0.00%

Published-10 Nov, 2025 | 20:00

Updated-13 Nov, 2025 | 15:24

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

Vendor-Linux Kernel Organization, Inc Apple Inc.Google LLC Microsoft Corporation

Product-chrome windows macos linux_kernel Chrome

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8675

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.42% / 80.78%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:39

Updated-04 Aug, 2024 | 21:24

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8696

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-1.42% / 80.78%

7 Day CHG~0.00%

Published-27 Oct, 2020 | 19:39

Updated-04 Aug, 2024 | 21:24

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8527

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.1||CRITICAL

EPSS-1.60% / 81.93%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:17

A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.

Vendor-Apple Inc.

Product-mac_os_x iphone_os watchos tvos tvOS macOS watchOS iOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8542

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.35% / 57.59%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:24

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges.

Vendor-Apple Inc.

Product-itunes iphone_os watchos tvos mac_os_x icloud iTunes for Windows watchOS iCloud for Windows macOS iOS tvOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-23188

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-5.68% / 90.49%

7 Day CHG~0.00%

Published-16 Feb, 2022 | 16:38

Updated-23 Apr, 2025 | 19:04

Adobe Illustrator Buffer Overflow could lead to Arbitrary code execution

Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a buffer overflow vulnerability due to insecure handling of a crafted malicious file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted malicious file in Illustrator.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows macos illustrator Illustrator

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-23187

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-1.19% / 79.04%

7 Day CHG~0.00%

Published-11 Mar, 2022 | 17:54

Updated-23 Apr, 2025 | 18:54

Adobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code execution

Adobe Illustrator version 26.0.3 (and earlier) is affected by a buffer overflow vulnerability due to insecure handling of a crafted file, potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file in Illustrator.

Vendor-Adobe Inc.Apple Inc.Microsoft Corporation

Product-windows macos illustrator Illustrator

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22593

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-1.69% / 82.46%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:14

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-22634

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.31% / 54.00%

7 Day CHG~0.00%

Published-18 Mar, 2022 | 17:59

Updated-03 Aug, 2024 | 03:21

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

Vendor-Apple Inc.

Product-iphone_os ipados tvos tvOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-8508

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.05% / 15.39%

7 Day CHG~0.00%

Published-18 Dec, 2019 | 17:33

Updated-04 Aug, 2024 | 21:17

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Mojave 10.14.4. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges.

Vendor-Apple Inc.

Product-mac_os_x macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2022-1735

Matching Score-6

Assigner-Protect AI (formerly huntr.dev)

Matching Score-6

Assigner-Protect AI (formerly huntr.dev)

CVSS Score-6.6||MEDIUM

EPSS-0.24% / 46.52%

7 Day CHG~0.00%

Published-17 May, 2022 | 00:00

Updated-03 Aug, 2024 | 00:16

Classic Buffer Overflow in vim/vim

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.

Vendor-Vim Apple Inc.

Product-macos vim vim/vim

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-28875

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.14% / 33.50%

7 Day CHG~0.00%

Published-25 Mar, 2026 | 00:32

Updated-02 Apr, 2026 | 18:19

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote attacker may be able to cause a denial-of-service.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-28925

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.03% / 9.21%

7 Day CHG~0.00%

Published-11 May, 2026 | 20:08

Updated-12 May, 2026 | 17:24

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5. An app may be able to cause unexpected system termination or write kernel memory.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-28841

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-6.2||MEDIUM

EPSS-0.02% / 6.39%

7 Day CHG~0.00%

Published-25 Mar, 2026 | 00:31

Updated-02 Apr, 2026 | 18:12

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Tahoe 26.4. A buffer overflow may result in memory corruption and unexpected app termination.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-28858

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.15% / 34.94%

7 Day CHG~0.00%

Published-25 Mar, 2026 | 00:32

Updated-02 Apr, 2026 | 18:20

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.4 and iPadOS 26.4. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Vendor-Apple Inc.

Product-iphone_os ipados iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2026-28959

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.5||HIGH

EPSS-0.06% / 18.52%

7 Day CHG~0.00%

Published-11 May, 2026 | 20:07

Updated-12 May, 2026 | 20:16

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. An app may be able to cause unexpected system termination.

Vendor-Apple Inc.

Product-watchOS iOS and iPadOS visionOS tvOS macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2020-9962

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.77% / 73.63%

7 Day CHG~0.00%

Published-02 Apr, 2021 | 17:21

Updated-04 Aug, 2024 | 10:50

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted image may lead to arbitrary code execution.

Vendor-Apple Inc.

Product-iphone_os watchos ipados tvos mac_os_x macos tvOS macOS watchOS iOS and iPadOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2019-15166

Matching Score-6

Assigner-MITRE Corporation

Vendor-n/a Apple Inc.NetApp, Inc.Canonical Ltd.openSUSE Fedora Project Red Hat, Inc.Debian GNU/Linux tcpdump & libpcap

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-1.6||LOW

EPSS-1.02% / 77.42%

7 Day CHG~0.00%

Published-03 Oct, 2019 | 16:01

Updated-03 Dec, 2025 | 19:15

lmp_print in tcpdump lacks certain boundary checks

lmp_print_data_link_subobjs() in print-lmp.c in tcpdump before 4.9.3 lacks certain bounds checks.

Product-ubuntu_linux enterprise_linux leap fedora cloud_backup mac_os_x hci_management_node solidfire tcpdump debian_linux n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2013-0894

Matching Score-6

Assigner-Chrome

Matching Score-6

Assigner-Chrome

CVSS Score-7.5||HIGH

EPSS-0.47% / 64.75%

7 Day CHG~0.00%

Published-23 Feb, 2013 | 21:00

Updated-29 Apr, 2026 | 01:13

Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.

Vendor-n/a Canonical Ltd.Apple Inc.FFmpeg openSUSE Google LLC Linux Kernel Organization, Inc Microsoft Corporation

Product-ubuntu_linux ffmpeg windows macos chrome linux_kernel opensuse n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2013-0641

Matching Score-6

Matching Score-6

Product-acrobat acrobat_reader linux_enterprise_desktop mac_os_x enterprise_linux_server enterprise_linux_workstation enterprise_linux_desktop windows enterprise_linux_server_aus enterprise_linux_eus linux_kernel opensuse n/a Reader

CVSS Score-7.8||HIGH

EPSS-87.96% / 99.49%

7 Day CHG~0.00%

Published-14 Feb, 2013 | 01:00

Updated-21 Apr, 2026 | 21:01

Known KEV||Action Due Date - 2022-03-24||Apply updates per vendor instructions.

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.

Vendor-n/a Apple Inc.openSUSE Linux Kernel Organization, Inc SUSE Red Hat, Inc.Microsoft Corporation Adobe Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-1985

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.05% / 14.36%

7 Day CHG~0.00%

Published-24 Aug, 2020 | 15:30

Updated-16 Sep, 2024 | 16:32

IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207.

Vendor-IBM Corporation Apple Inc.

Product-macos security_rapport Security Trusteer Rapport Security Rapport for MacOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-54568

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.07% / 20.07%

7 Day CHG+0.02%

Published-29 Aug, 2025 | 00:28

Updated-02 Apr, 2026 | 18:21

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.2. Parsing a maliciously crafted file may lead to an unexpected app termination.

Vendor-Apple Inc.

Product-macos macOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2018-14879

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7||HIGH

EPSS-0.52% / 67.01%

7 Day CHG~0.00%

Published-03 Oct, 2019 | 15:33

Updated-03 Dec, 2025 | 21:15

The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().

Vendor-n/a Apple Inc.openSUSE Fedora Project Red Hat, Inc.Debian GNU/Linux F5, Inc.tcpdump & libpcap

Product-tcpdump enterprise_linux traffix_signaling_delivery_controller leap fedora mac_os_x debian_linux n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-44160

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.03% / 8.24%

7 Day CHG~0.00%

Published-16 Sep, 2024 | 23:22

Updated-02 Apr, 2026 | 19:18

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. Processing a maliciously crafted texture may lead to unexpected app termination.

Vendor-Apple Inc.

Product-macos macOS macos

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-400

Uncontrolled Resource Consumption

CVE-2024-44218

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-7.8||HIGH

EPSS-0.02% / 6.68%

7 Day CHG~0.00%

Published-28 Oct, 2024 | 21:07

Updated-02 Apr, 2026 | 19:18

This issue was addressed with improved checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1. Processing a maliciously crafted file may lead to heap corruption.

Vendor-Apple Inc.

Product-iphone_os ipados macos macOS iOS and iPadOS ios ipados macos

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write

CVE-2024-44232

Matching Score-6

Assigner-Apple Inc.

Matching Score-6

Assigner-Apple Inc.

CVSS Score-6.5||MEDIUM

EPSS-0.15% / 35.34%

7 Day CHG~0.00%

Published-01 Nov, 2024 | 20:41

Updated-02 Apr, 2026 | 19:18

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. Parsing a maliciously crafted video file may lead to unexpected system termination.

Vendor-Apple Inc.

Product-tvos visionos watchos macos iphone_os ipados visionOS macOS tvOS iOS and iPadOS watchOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2024-44233

Matching Score-6

Assigner-Apple Inc.