CVE-2025-24152

Memory Handling Defect Causing System Crash or Kernel Corruption in macOS

Published Jan 27, 2025 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.

Analysis

AI-generated

Technical impact

The vulnerability arises from improper memory handling that allows a user‑level application to trigger unexpected system termination or kernel memory corruption. This can result in denial of service and compromise of system integrity if exploited. The flaw is categorized as a memory corruption vulnerability leading to potential instability of the operating system.

Affected Systems

Apple macOS is affected. The issue is fixed in macOS Sequoia 15.3; therefore, devices running Sequoia versions prior to 15.3 are at risk. Previous macOS releases that share the same kernel code may also be affected, but the CVE explicitly references Sequoia 15.3 as the release that includes the fix.

Risk and Exploitability

The CVSS score of 5.5 indicates a medium severity. The EPSS score is less than 1 percent, implying a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector is local execution through a malicious or poorly written application that can trigger the memory handling flaw. Because the flaw requires user‑level code to access kernel memory indirectly, it is not considered a remote‑easily exploitable vulnerability in current public information.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade macOS to the latest available version, such as macOS Sequoia 15.3 or newer, to apply the memory handling fix.
  • After installing the update, reboot the system to clear any corrupted kernel memory state.
  • Monitor system logs for unexpected termination events and discontinue use of applications that previously caused such crashes until the update is applied.

Generated by OpenCVE AI on April 28, 2026 at 04:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-3656 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
History
Type Values Removed Values Added
Title Memory Handling Defect Causing System Crash or Kernel Corruption in macOS
Weaknesses CWE-119
CWE-416
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Apr 2, 2026, 6:08 PM
Reserved
Jan 17, 2025, 12:00 AM
Status
Modified
Published
Jan 27, 2025, 10:15 PM
Modified
Jun 17, 2026, 8:58 AM