Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
Published: 2025-01-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Kernel memory corruption and system termination
Action: Patch
AI Analysis

Impact

The flaw is a CWE-400 vulnerability involving inadequate memory validation that lets an application trigger faulty memory handling routines. When executed, the issue can corrupt kernel memory, leading to unexpected system termination. The impact is a loss of system availability and a compromise of kernel integrity.

Affected Systems

Apple macOS is affected. The vulnerability is resolved in macOS Sequoia 15.3, macOS Sonoma 14.7.3, and macOS Ventura 13.7.3; versions older than these releases remain vulnerable.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, and the EPSS score of less than 1% reflects a low likelihood of exploitation under current conditions. It is not listed in CISA KEV, suggesting no widespread known exploitation yet. The attack would most likely arise from a malicious or compromised application that runs locally on the affected Mac, providing an avenue for attackers to exploit the fault.

Generated by OpenCVE AI on April 28, 2026 at 22:50 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the official macOS update to Sequoia 15.3, Sonoma 14.7.3, or Ventura 13.7.3 depending on your current version; this patch mitigates the CWE-400 resource exhaustion issue.
  • Restart the system to ensure kernel memory handling changes are applied.
  • Verify that any third‑party applications are also updated to versions that incorporate the corrected memory handling and monitor system logs for kernel panics or unexpected terminations.

Generated by OpenCVE AI on April 28, 2026 at 22:50 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3655 The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
History

Tue, 28 Apr 2026 23:15:00 +0000

Type Values Removed Values Added
Title Improved Memory Handling Vulnerability Causing Kernel Corruption and System Termination

Thu, 02 Apr 2026 20:30:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory. The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Thu, 13 Mar 2025 20:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Mon, 03 Mar 2025 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H'}

Tue, 18 Feb 2025 20:45:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Tue, 28 Jan 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 27 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

Subscriptions

Apple Macos
cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-05-21T14:25:34.720Z

Reserved: 2025-01-17T00:00:44.983Z

Link: CVE-2025-24151

cve-icon Vulnrichment

Updated: 2025-11-03T21:04:21.096Z

cve-icon NVD

Status : Modified

Published: 2025-01-27T22:15:19.360

Modified: 2026-04-02T19:19:08.123

Link: CVE-2025-24151

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T23:00:13Z

Weaknesses