CVE-2025-31196

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iPadOS 17.7.7, macOS Ventura 13.7.6, macOS Sonoma 14.7.6. Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents.

Reserved 2025-03-27 | Published 2025-05-12 | Updated 2025-05-13 | Assigner apple

Problem types

Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents

Product status

Any version before 17.7
affected

Any version before 14.7
affected

Any version before 13.7
affected

References

support.apple.com/en-us/122405

support.apple.com/en-us/122717

support.apple.com/en-us/122718

cve.org (CVE-2025-31196)

nvd.nist.gov (CVE-2025-31196)

Download JSON