Description
The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.
Published: 2025-01-27
Score: 9.8 Critical
EPSS: 3.6% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Improper memory handling in system components allows an application to write arbitrary data to kernel memory or trigger an unexpected system shutdown. This flaw is characterized as a buffer or heap overflow (CWE‑787), enabling kernel data corruption that can destabilize the operating system and potentially allow an attacker to gain control or disrupt service.

Affected Systems

Apple devices running iPadOS versions earlier than 17.7.4 and macOS installations earlier than Sequoia 15.3 or Sonoma 14.7.3 are vulnerable. Any device with those operating system versions may be exposed to the flaw if a malicious or compromised application is installed.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.8 and an EPSS score of 4 %, indicating a high severity but a moderate likelihood of exploitation under current conditions. It is not listed in the CISA KEV catalog yet. Attackers would need to execute code on the local device, typically through a malicious application, to trigger the kernel write or induced termination. The impact is system-wide due to kernel memory involvement, but the vectors are confined to the device itself.

Generated by OpenCVE AI on June 18, 2026 at 03:04 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade iPadOS to 17.7.4 or newer
  • Upgrade macOS Sequoia to 15.3 or newer
  • Upgrade macOS Sonoma to 14.7.3 or newer
  • If an upgrade is not immediately possible, restrict installation of applications from untrusted sources and monitor the device for anomalous termination events

Generated by OpenCVE AI on June 18, 2026 at 03:04 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3630 The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.
History

Thu, 18 Jun 2026 04:45:00 +0000

Type Values Removed Values Added
Title Kernel memory corruption through improper write leading to system termination

Wed, 17 Jun 2026 07:45:00 +0000

Type Values Removed Values Added
Title Kernel memory corruption through improper write leading to system termination

Tue, 16 Jun 2026 06:30:00 +0000

Type Values Removed Values Added
Title Kernel Memory Write Vulnerability in iPadOS and macOS

Tue, 28 Apr 2026 12:30:00 +0000

Type Values Removed Values Added
Title Kernel Memory Write Vulnerability in iPadOS and macOS

Mon, 03 Nov 2025 21:30:00 +0000


Tue, 18 Mar 2025 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple ipados
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple ipados
Apple macos

Tue, 28 Jan 2025 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 27 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-06-02T16:04:10.891Z

Reserved: 2025-01-17T00:00:44.970Z

Link: CVE-2025-24118

cve-icon Vulnrichment

Updated: 2025-11-03T21:02:13.240Z

cve-icon NVD

Status : Modified

Published: 2025-01-27T22:15:17.033

Modified: 2026-06-17T08:58:07.000

Link: CVE-2025-24118

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-18T03:15:04Z

Weaknesses