CVE-2025-31221 - Vulnerability Details

- Integer Overflow Memory Leak in Apple Operating Systems

Description

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to leak memory.

Published: 2025-05-12

Score: 7.5 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

An integer overflow flaw was present in several Apple operating systems; the issue was addressed with improved input validation. The vulnerability allows a remote attacker to trigger the overflow, potentially causing a memory leak and exposing sensitive data.

Affected Systems

Apple iOS, iPadOS, macOS, tvOS, visionOS, and watchOS are affected. The flaw has been fixed in iOS 18.5, iPadOS 18.5 and iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, and watchOS 11.5.

Risk and Exploitability

The vulnerability has a CVSS score of 7.5, indicating high severity. Its EPSS score is reported as < 1%, suggesting a low probability of exploitation in the wild, and it is not listed in CISA’s KEV catalog. A remote attacker is the likely vector, as the CVE description explicitly states that a remote attacker may be able to leak memory.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Apple

iOS and iPadOS

affected

Version	Status	Constraints
`0`	affected	< 18.5

Apple

iPadOS

affected

Version	Status	Constraints
`0`	affected	< 17.7.7

Apple

macOS

affected

Version	Status	Constraints
`0`	affected	< 13.7.6
`0`	affected	< 14.7.6
`0`	affected	< 15.5

Apple

tvOS

affected

Version	Status	Constraints
`0`	affected	< 18.5

Apple

visionOS

affected

Version	Status	Constraints
`0`	affected	< 2.5

Apple

watchOS

affected

Version	Status	Constraints
`0`	affected	< 11.5

Configuration 1 [-]

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:macos::::::::
	cpe:2.3:o:apple:tvos::::::::
	cpe:2.3:o:apple:visionos::::::::
	cpe:2.3:o:apple:watchos::::::::

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the latest operating system updates (iOS 18.5, iPadOS 18.5 or 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, or watchOS 11.5).
Limit or disable any remote services that could trigger the integer overflow.
Monitor the system for anomalous memory usage or signs of exploit attempts.

Generated by OpenCVE AI on April 28, 2026 at 11:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2025-14620	An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may be able to leak memory.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00764.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
http://seclists.org/fulldisclosure/2025/May/10
http://seclists.org/fulldisclosure/2025/May/12
http://seclists.org/fulldisclosure/2025/May/5
http://seclists.org/fulldisclosure/2025/May/6
http://seclists.org/fulldisclosure/2025/May/7
http://seclists.org/fulldisclosure/2025/May/8
http://seclists.org/fulldisclosure/2025/May/9
https://support.apple.com/en-us/122404
https://support.apple.com/en-us/122405
https://support.apple.com/en-us/122716
https://support.apple.com/en-us/122717
https://support.apple.com/en-us/122718
https://support.apple.com/en-us/122720
https://support.apple.com/en-us/122721
https://support.apple.com/en-us/122722

History

Tue, 28 Apr 2026 11:45:00 +0000

Type	Values Removed	Values Added
Title		Integer Overflow Memory Leak in Apple Operating Systems

Thu, 02 Apr 2026 20:30:00 +0000

Type	Values Removed	Values Added
Description	An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may be able to leak memory.	An integer overflow was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to leak memory.

Mon, 03 Nov 2025 20:30:00 +0000

Type	Values Removed	Values Added
References		http://seclists.org/fulldisclosure/2025/May/10 http://seclists.org/fulldisclosure/2025/May/12 http://seclists.org/fulldisclosure/2025/May/5 http://seclists.org/fulldisclosure/2025/May/6 http://seclists.org/fulldisclosure/2025/May/7 http://seclists.org/fulldisclosure/2025/May/8 http://seclists.org/fulldisclosure/2025/May/9

Tue, 27 May 2025 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Apple Apple ipados Apple iphone Os Apple macos Apple tvos Apple visionos Apple watchos
CPEs		cpe:2.3:o:apple:ipados:::::::: cpe:2.3:o:apple:iphone_os:::::::: cpe:2.3:o:apple:macos:::::::: cpe:2.3:o:apple:tvos:::::::: cpe:2.3:o:apple:visionos:::::::: cpe:2.3:o:apple:watchos::::::::
Vendors & Products		Apple Apple ipados Apple iphone Os Apple macos Apple tvos Apple visionos Apple watchos

Wed, 14 May 2025 16:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-284

Wed, 14 May 2025 15:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-190

Tue, 13 May 2025 20:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Mon, 12 May 2025 21:45:00 +0000

Type	Values Removed	Values Added
Description		An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 11.5, macOS Sonoma 14.7.6, tvOS 18.5, iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, visionOS 2.5, macOS Ventura 13.7.6. A remote attacker may be able to leak memory.
References		https://support.apple.com/en-us/122404 https://support.apple.com/en-us/122405 https://support.apple.com/en-us/122716 https://support.apple.com/en-us/122717 https://support.apple.com/en-us/122718 https://support.apple.com/en-us/122720 https://support.apple.com/en-us/122721 https://support.apple.com/en-us/122722

Subscriptions

Apple Ipados Iphone Os Macos Tvos Visionos Watchos

MITRE

Status: PUBLISHED

Assigner: apple

Published: 2025-05-12T21:42:54.091Z

Updated: 2026-04-02T18:22:37.616Z

Reserved: 2025-03-27T16:13:58.319Z

Link: CVE-2025-31221

Vulnrichment

Updated: 2025-11-03T19:50:07.218Z

NVD

Status : Modified

Published: 2025-05-12T22:15:22.873

Modified: 2026-04-02T19:19:50.073

Link: CVE-2025-31221

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-04-28T11:30:29Z

Weaknesses

CWE-190

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object