Description
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
Published: 2025-01-27
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service and Kernel Corruption
Action: Apply Update
AI Analysis

Impact

The vulnerability arises from improper memory handling that allows a user‑level application to trigger unexpected system termination or kernel memory corruption. This can result in denial of service and compromise of system integrity if exploited. The flaw is categorized as a memory corruption vulnerability leading to potential instability of the operating system.

Affected Systems

Apple macOS is affected. The issue is fixed in macOS Sequoia 15.3; therefore, devices running Sequoia versions prior to 15.3 are at risk. Previous macOS releases that share the same kernel code may also be affected, but the CVE explicitly references Sequoia 15.3 as the release that includes the fix.

Risk and Exploitability

The CVSS score of 5.5 indicates a medium severity. The EPSS score is less than 1 percent, implying a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. The most likely attack vector is local execution through a malicious or poorly written application that can trigger the memory handling flaw. Because the flaw requires user‑level code to access kernel memory indirectly, it is not considered a remote‑easily exploitable vulnerability in current public information.

Generated by OpenCVE AI on April 28, 2026 at 04:14 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade macOS to the latest available version, such as macOS Sequoia 15.3 or newer, to apply the memory handling fix.
  • After installing the update, reboot the system to clear any corrupted kernel memory state.
  • Monitor system logs for unexpected termination events and discontinue use of applications that previously caused such crashes until the update is applied.

Generated by OpenCVE AI on April 28, 2026 at 04:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-3656 The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
History

Tue, 28 Apr 2026 04:30:00 +0000

Type Values Removed Values Added
Title Memory Handling Defect Causing System Crash or Kernel Corruption in macOS
Weaknesses CWE-119
CWE-416

Mon, 03 Nov 2025 21:30:00 +0000

Type Values Removed Values Added
References

Fri, 31 Jan 2025 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Thu, 30 Jan 2025 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Mon, 27 Jan 2025 22:00:00 +0000

Type Values Removed Values Added
Description The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app may be able to cause unexpected system termination or corrupt kernel memory.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: apple

Published:

Updated: 2026-04-02T18:08:40.584Z

Reserved: 2025-01-17T00:00:44.983Z

Link: CVE-2025-24152

cve-icon Vulnrichment

Updated: 2025-11-03T21:04:22.484Z

cve-icon NVD

Status : Modified

Published: 2025-01-27T22:15:19.443

Modified: 2025-11-03T21:19:28.023

Link: CVE-2025-24152

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-04-28T04:15:16Z