Description
The issue was addressed with improved input sanitization. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory.
Metrics
CVSS 3.1 6.3/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS and iPadOS | < 18.5 |
| Apple | iPadOS | < 17.7.7 |
| Apple | macOS | < 13.7.6; < 14.7.6; < 15.5 |
| Apple | tvOS | < 18.5 |
| Apple | visionOS | < 2.5 |
| Apple | watchOS | < 11.5 |
References
- https://support.apple.com/en-us/122404Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122405Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122716Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122717Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122718Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122720Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122721Release Notes, Vendor Advisory
- https://support.apple.com/en-us/122722Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2025/May/11
- http://seclists.org/fulldisclosure/2025/May/12
- http://seclists.org/fulldisclosure/2025/May/5
- http://seclists.org/fulldisclosure/2025/May/6
- http://seclists.org/fulldisclosure/2025/May/7
- http://seclists.org/fulldisclosure/2025/May/8
- http://seclists.org/fulldisclosure/2025/May/9
Timeline
- Published
- May 12, 2025
- Last modified
- Jun 17, 2026
- NVD status
- Modified