高危
Apple多款产品内存损坏漏洞
2025-04-16 18:24:31 公开 ，2026-04-02 19:31:08 更新
- CISA KEV
- 关键漏洞
- 公开PoC
- 远程
- 无需认证
- CWE Top 25 (2023)
- CWE Top 25 (2024)
风险信息
- CVSS v3.1 向量
- AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS v3.1 风险值
- 7.5
详细信息
- 漏洞类型
- 其他
- 漏洞描述
- Apple iOS、iPadOS、macOS Sequoia、tvOS、visionOS和其他Apple产品包含内存损坏漏洞，该漏洞允许在处理恶意制作的媒体文件中的音频流时执行代码。
- 修复建议
- 请立即升级至tvOS 18.4.1、visionOS 2.4.1、iOS 18.4.1、iPadOS 18.4.1、macOS Sequoia 15.4.1或更高版本，参考链接： https://support.apple.com/en-us/122400 https://support.apple.com/en-us/122401 https://support.apple.com/en-us/122402 https://support.apple.com/en-us/122282
参考链接
- https://support.apple.com/en-us/122282
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/122400
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/122401
CVE · Vendor Advisory · Release Notes
- https://support.apple.com/en-us/122402
CVE · Vendor Advisory · Release Notes
- https://news.ycombinator.com/item?id=44161894
NVD · Issue Tracking
- https://blog.noahhw.dev/posts/cve-2025-31200/
NVD · Exploit
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31200
NVD · US Government Resource
- http://seclists.org/fulldisclosure/2025/Jun/14
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Apr/26
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Oct/4
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2025/May/10
NVD · Mailing List · Third Party Advisory
- http://seclists.org/fulldisclosure/2025/Oct/0
NVD · Mailing List · Third Party Advisory
- https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md
NVD · Exploit
- https://github.com/cisagov/vulnrichment/issues/200
NVD · Issue Tracking
- https://support.apple.com/en-us/122722
CVE · Vendor Advisory · Release Notes