CVE-2025-24085

The use-after-free vulnerability (CWE-416) occurs when code references a memory area that has already been freed, leading to undefined system behavior. A malicious application installed on the device can trigger an appropriate sequence of operations to gain access to the freed memory segment and thus take control of code execution flow. This results in the ability to obtain higher system privileges than those to which the application is normally entitled. Apple resolved the issue by improving memory management mechanisms.

A malicious application installed on the device can perform privilege escalation, obtaining elevated system privileges. This can lead to complete takeover of the device, including compromise of confidentiality, integrity, and availability of data.

Devices must be immediately updated to: iOS 18.3 or iPadOS 18.3 (or iPadOS 17.7.6 for older devices), macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. Details are available in official Apple security bulletins at the addresses indicated in the references.

iOS before version 18.3, iPadOS before versions 18.3 and 17.7.6, macOS Sequoia before 15.3, macOS Sonoma before 14.7.5, macOS Ventura before 13.7.5, tvOS before 18.3, visionOS before 2.3, watchOS before 11.3. Confirmed active attacks on iOS versions older than 17.2.

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Apple iOS, macOS, and other Apple products contain a user-after-free vulnerability that could allow a malicious application to elevate privileges.