CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability

CVE-2025-31200 · Severity: critical · CVSS 9.8 · Exploited in the wild · Published 2025-04-17

A memory corruption vulnerability in multiple Apple operating systems allows for remote code execution when processing a maliciously crafted audio stream. The issue was addressed through improved bounds checking in various OS updates.

Technologies: Apple Multiple Products. Vendors: Apple.

Quick answers

Is CVE-2025-31200 exploited in the wild?
Yes. CVE-2025-31200 is known to be exploited in the wild, first recorded on 17 April 2025. Treat it as urgent.
How severe is CVE-2025-31200?
Critical severity, with a CVSS score of 9.8, published 17 April 2025.
Which products and versions are affected?
Apple iOS before 18.4.1; Apple iPadOS before 18.4.1; Apple macOS Sequoia before 15.4.1; Apple tvOS before 18.4.1; and 2 more.
Is there a fix for CVE-2025-31200?
A patch was published on 2025-04-17: Fixed in iOS 18.4.1, iPadOS 18.4.1, macOS 15.4.1, tvOS 18.4.1, visionOS 2.4.1, and watchOS 11.5 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-31200 attacked?
It is attacked over the network, in an operating system.
Am I affected by CVE-2025-31200?
Check whether you run Apple Multiple Products. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Apple iOS before 18.4.1
  • Apple iPadOS before 18.4.1
  • Apple macOS Sequoia before 15.4.1
  • Apple tvOS before 18.4.1
  • Apple visionOS before 2.4.1
  • Apple watchOS before 11.5

Timeline

  • 2025-04-17: disclosed
  • 2025-04-17: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2025-04-17: patched: Fixed in iOS 18.4.1, iPadOS 18.4.1, macOS 15.4.1, tvOS 18.4.1, visionOS 2.4.1, and watchOS 11.5
  • exploited: Apple reported awareness of exploitation in sophisticated attacks against targeted individuals on iOS versions prior to 18.4.1.

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.