CVE-2025-24195

Privilege Escalation via Integer Overflow in macOS

Published Mar 31, 2025 CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Description

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

Analysis

Technical impact

An integer overflow condition in macOS allows a local user to potentially gain higher privileges by supplying crafted input that bypasses bounds checks. The flaw has been fixed in the recent releases of Sequoia, Sonoma, and Ventura, meaning that exploitation would be limited to earlier builds. The vulnerability is categorized as incorrect access control, which is a high‑risk weakness that can lead to arbitrary code execution if successfully triggered.

Affected Systems

Apple macOS is affected. The vulnerability is mitigated in macOS Sequoia 15.4, macOS Sonoma 14.7.5, and macOS Ventura 13.7.5. All earlier versions of these operating systems remain susceptible.

Risk and Exploitability

The CVSS score of 9.8 indicates critical severity, while the EPSS score of less than 1 % reflects a very low current exploitation probability. The vulnerability is not listed in the CISA KEV catalog. The attack vector is most likely local; an attacker must have access to a user session or execute malicious input on the target system to trigger the overflow.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.5
`0`	affected	< 14.7.5
`0`	affected	< 15.4

Configuration 1 [-]

OR	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update to the latest macOS releases: Sequoia 15.4, Sonoma 14.7.5, or Ventura 13.7.5 wherein the integer overflow is fixed.
Restrict local user access to the component or service that processes the vulnerable input, limiting the potential for privilege escalation.
Monitor for suspicious activity that may indicate exploitation attempts, such as attempts to invoke the vulnerable function with abnormal input.

Generated by OpenCVE AI on April 28, 2026 at 11:46 UTC.

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2025-9001	An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.944% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
http://seclists.org/fulldisclosure/2025/Apr/10
http://seclists.org/fulldisclosure/2025/Apr/8
http://seclists.org/fulldisclosure/2025/Apr/9
https://support.apple.com/en-us/122373
https://support.apple.com/en-us/122374
https://support.apple.com/en-us/122375

History

Apr 28, 2026 12:15 PM Title updated View changes

Type	Values Removed	Values Added
Title		Privilege Escalation via Integer Overflow in macOS

Apr 2, 2026 8:30 PM Description updated View changes

Type	Values Removed	Values Added
Description	An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges.	An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

Feb 26, 2026 11:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Nov 3, 2025 9:30 PM Added references View changes

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/Apr/10 http://seclists.org/fulldisclosure/2025/Apr/8 http://seclists.org/fulldisclosure/2025/Apr/9

Apr 7, 2025 2:45 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Apple Apple macos
CPEs		cpe:2.3:o:apple:macos::::::::
Vendors & Products		Apple Apple macos

Apr 1, 2025 2:15 PM Weaknesses updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-276
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 31, 2025 10:45 PM Description updated. Added references View changes

Type	Values Removed	Values Added
Description		An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. A user may be able to elevate privileges.
References		https://support.apple.com/en-us/122373 https://support.apple.com/en-us/122374 https://support.apple.com/en-us/122375