Firetruck

CVE-2025-31200

KEV
Updated Apr 2, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, and other Apple products contain a memory corruption vulnerability that allows for code execution when processing an audio stream in a maliciously crafted media file.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 18.4.1affected
macOSApple / macOS>= 0, < 15.4.1affected
tvOSApple / tvOS>= 0, < 18.4.1affected
visionOSApple / visionOS>= 0, < 2.4.1affected
watchOSApple / watchOS>= 0, < 11.5affected