CVE-2025-24151

Improved Memory Handling Vulnerability Causing Kernel Corruption and System Termination

Published Jan 27, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

Analysis

Technical impact

The flaw is a CWE-400 vulnerability involving inadequate memory validation that lets an application trigger faulty memory handling routines. When executed, the issue can corrupt kernel memory, leading to unexpected system termination. The impact is a loss of system availability and a compromise of kernel integrity.

Affected Systems

Apple macOS is affected. The vulnerability is resolved in macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3; versions older than these releases remain vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% reflects a low likelihood of exploitation under current conditions. It is not listed in CISA KEV, suggesting no widespread known exploitation yet. The attack would most likely arise from a malicious or compromised application that runs locally on the affected Mac, providing an avenue for attackers to exploit the fault.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.3
`0`	affected	< 14.7.3
`0`	affected	< 15.3

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Install the official macOS update to Sequoia 15.3, Sonoma 14.7.3, or Ventura 13.7.3 depending on your current version; this patch mitigates the CWE-400 resource exhaustion issue.
Restart the system to ensure kernel memory handling changes are applied.
Verify that any third‑party applications are also updated to versions that incorporate the corrected memory handling and monitor system logs for kernel panics or unexpected terminations.

Generated by OpenCVE AI on April 28, 2026 at 22:50 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-3655	The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.233% probability within 30 days)

Exploitation none

Automatable yes

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Jan/15
http://seclists.org/fulldisclosure/2025/Jan/16
http://seclists.org/fulldisclosure/2025/Jan/17
https://support.apple.com/en-us/122068
https://support.apple.com/en-us/122069
https://support.apple.com/en-us/122070

History

Apr 28, 2026 11:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Improved Memory Handling Vulnerability Causing Kernel Corruption and System Termination

Apr 2, 2026 8:30 PM Description updated View changes

Type	Values Removed	Values Added
Description	The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.	The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

Nov 3, 2025 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Jan/15 http://seclists.org/fulldisclosure/2025/Jan/16 http://seclists.org/fulldisclosure/2025/Jan/17

Mar 13, 2025 8:15 PM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-400

Mar 3, 2025 11:15 PM First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}`

Feb 18, 2025 8:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Jan 28, 2025 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jan 27, 2025 10:00 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
References		https://support.apple.com/en-us/122068 https://support.apple.com/en-us/122069 https://support.apple.com/en-us/122070