ByteOS Network

CVE Vulnerability Details :

CVE-2025-24085

PUBLISHED

More Info Official Page

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

View Known Exploited Vulnerability (KEV) details

Published At-27 Jan, 2025 | 21:45

Updated At-13 Nov, 2025 | 19:44

▼CVE Numbering Authority (CNA)

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

From unspecified before 18.3 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Type: N/A

CWE ID: N/A

Description: A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

References

Hyperlink	Resource
https://support.apple.com/en-us/122073	N/A
https://support.apple.com/en-us/122072	N/A
https://support.apple.com/en-us/122068	N/A
https://support.apple.com/en-us/122071	N/A
https://support.apple.com/en-us/122066	N/A

Hyperlink: https://support.apple.com/en-us/122073

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122072

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122068

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122071

Resource: N/A

Hyperlink: https://support.apple.com/en-us/122066

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-416	CWE-416 Use After Free

Type: CWE

CWE ID: CWE-416

Description: CWE-416 Use After Free

Metrics

Version	Base score	Base severity	Vector
3.1	10.0	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Version: 3.1

Base score: 10.0

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2025-01-29

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24085

Resource:

government-resource

2. CVE Program Container

References

Hyperlink	Resource
http://seclists.org/fulldisclosure/2025/Oct/30	N/A
http://seclists.org/fulldisclosure/2025/Oct/31	N/A
http://seclists.org/fulldisclosure/2025/Oct/23	N/A
http://seclists.org/fulldisclosure/2025/Oct/1	N/A
http://seclists.org/fulldisclosure/2025/Jun/19	N/A
http://seclists.org/fulldisclosure/2025/Apr/10	N/A
http://seclists.org/fulldisclosure/2025/Apr/9	N/A
http://seclists.org/fulldisclosure/2025/Apr/5	N/A
http://seclists.org/fulldisclosure/2025/Jan/19	N/A
http://seclists.org/fulldisclosure/2025/Jan/15	N/A
http://seclists.org/fulldisclosure/2025/Jan/13	N/A
http://seclists.org/fulldisclosure/2025/Jan/12	N/A
https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201	N/A
https://github.com/cisagov/vulnrichment/issues/194	N/A