CVE-2025-31200: apple macos +5 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2025-31200

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 20,9%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada apple macos, apple tvos +4 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut CISA ADP. Masuk katalog KEV CISA pada 17 April 2025, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

Rincian

Terbit di NVD: 16 April 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
EPSS (30 hari): 20,9% peluang dieksploitasi; lebih tinggi dari 97,5% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Apple Multiple Products Memory Corruption Vulnerability
Masuk KEV: 17 April 2025
Tenggat CISA: 8 Mei 2025 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
apple	macos	Versi 15.0 hingga sebelum 15.4.1
apple	tvos	Semua versi sebelum 18.4.1
apple	visionos	Semua versi sebelum 2.4.1
apple	ipados	Semua versi sebelum 18.4.1
apple	iphone os	Semua versi sebelum 18.4.1
apple	watchos	Semua versi sebelum 11.5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.apple.com/en-us/122282 release notes · advisory vendor
https://support.apple.com/en-us/122400 release notes · advisory vendor
https://support.apple.com/en-us/122401 release notes · advisory vendor
https://support.apple.com/en-us/122402 release notes · advisory vendor
https://support.apple.com/en-us/122722 release notes · advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200 pemerintah AS
http://seclists.org/fulldisclosure/2025/Apr/26 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2025/Jun/14 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2025/May/10 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2025/Oct/0 mailing list · advisory pihak ketiga
http://seclists.org/fulldisclosure/2025/Oct/4 mailing list · advisory pihak ketiga
https://blog.noahhw.dev/posts/cve-2025-31200/ broken link · exploit
https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20C... broken link · exploit
https://news.ycombinator.com/item?id=44161894 issue tracking
https://github.com/cisagov/vulnrichment/issues/200 issue tracking

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.