CVE-2025-31201

The vulnerability resulted from the presence of vulnerable code handling the Pointer Authentication mechanism — an ARM hardware security feature protecting memory pointers from manipulation. An attacker with the ability to perform arbitrary memory read and write operations could exploit this code to bypass PAC. Apple resolved the issue by eliminating the vulnerable code fragment. The vulnerability could be used as part of an exploit chain in attacks targeting specific, selected individuals.

An attacker can bypass the Pointer Authentication mechanism, which in combination with other techniques can lead to complete device takeover, and compromise of confidentiality, integrity, and availability of data.

Must immediately update to: iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. Patches available through Apple's system update mechanism.

iOS and iPadOS before version 18.4.1, macOS Sequoia before version 15.4.1, tvOS before version 18.4.1, visionOS before version 2.4.1

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.