5.5
CVE-2025-31251 - Memory Corruption from Improper Input Sanitization in Apple Media File Processing
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted media file may lead to unexpected app term…
5.5
CVE-2025-31226 - Denial of Service Triggered by Malicious Image Processing on Apple Platforms
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted image may lead to a denial-of-service.
6.5
CVE-2025-24225 - Injection in Email Handling Allows User Interface Spoofing on iOS/iPadOS
An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing.
4.6
CVE-2025-31227 - Physical-Access Enabled Retrieval of Deleted Call Recordings
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording.
9.1
CVE-2025-30436 - Siri Auto‑Answer Calls on Locked iOS/iPadOS Devices
This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.4 and iPadOS 18.4. An attacker may be able to use Siri to enable Auto-Answer Calls.
5.5
CVE-2025-31196 -
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted file may lead to a denial-of-ser…
5.5
CVE-2025-31250 - Information Disclosure in macOS Sequoia Due to Inadequate Privacy Controls
An information disclosure issue was addressed with improved privacy controls. This issue is fixed in macOS Sequoia 15.5. An app may be able to access sensitive user data.
7.7
CVE-2025-31207 - App Enumeration Vulnerability in iOS and iPadOS
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An app may be able to enumerate a user's installed apps.
8.8
CVE-2025-31246 - Kernel Memory Corruption via AFP Server in macOS
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6. Connecting to a malicious AFP server may corrupt kernel memory.
6.3
CVE-2025-31195 - Sandbox Breakout via Missing Access Control in macOS
The issue was addressed by adding additional logic. This issue is fixed in macOS Sequoia 15.4. An app may be able to break out of its sandbox.