Firetruck

CVE-2025-31201

KEV
Updated Apr 2, 2026 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, and other Apple products contain an arbitrary read and write vulnerability that allows an attacker to bypass Pointer Authentication.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= 0, < 18.4.1affected
macOSApple / macOS>= 0, < 15.4.1affected
tvOSApple / tvOS>= 0, < 18.4.1affected
visionOSApple / visionOS>= 0, < 2.4.1affected