CVE-2025-24225

Description

An injection issue was addressed with improved input validation. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5. Processing an email may lead to user interface spoofing.

Reserved 2025-01-17 | Published 2025-05-12 | Updated 2025-05-14 | Assigner apple

Problem types

Processing an email may lead to user interface spoofing

Product status

Any version before 17.7
affected

Any version before 18.5
affected

References

support.apple.com/en-us/122405

support.apple.com/en-us/122404

cve.org (CVE-2025-24225)

nvd.nist.gov (CVE-2025-24225)

Download JSON