Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2025-24224: Apple devices can crash from remote attack
CVE-2025-24224 · published 1 year ago
Summary
iPhone, iPad, Mac, Apple TV, and Vision Pro operating systems are vulnerable to a remote attack that could cause the system to shut down unexpectedly. This could disrupt work or personal use until the device is restarted. Update the devices to the latest versions (iOS 18.5, iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5) to fix the issue.
What to do
- Update apple iphone_os to version 18.5 or later.
- Update apple tvos to version 18.5 or later.
- Update apple visionos to version 2.5 or later.
- Update apple watchos to version 11.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 17.7.9 >= 18.0, < 18.5 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 18.5 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 13.7.7 >= 15.0, < 15.5 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
| apple | tvos |
< 18.5 cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* |
| apple | visionos |
< 2.5 cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:* |
| apple | watchos |
< 11.5 cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remo...
The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.9, macOS Sequoia 15.5, macOS Ventura 13.7.7, tvOS 18.5, visionOS 2.5, watchOS 11.5. A remote attacker may be able to cause unexpected system termination.
References
- https://support.apple.com/en-us/122404 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122716 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122720 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122721 Release Notes Vendor Advisory
- https://support.apple.com/en-us/122722 Release Notes Vendor Advisory
- https://support.apple.com/en-us/124148 Release Notes Vendor Advisory
- https://support.apple.com/en-us/124151 Release Notes Vendor Advisory
- http://seclists.org/fulldisclosure/2025/Jul/31
- http://seclists.org/fulldisclosure/2025/Jul/34
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-754Improper Check for Unusual or Exceptional Conditions
Timeline
Published30 Jul 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-24224 · NVD
Track software like this
Free during beta