CVE-2025-24195

The vulnerability consists of an integer overflow during input data processing by a macOS system component. An attacker can supply specially crafted input data that causes incorrect arithmetic calculations, leading to unexpected system behavior. Apple resolved the issue by introducing improved input validation. The vulnerability is classified as CWE-276, which indicates improper default permissions.

A user with limited privileges can obtain elevated system privileges (privilege escalation), potentially gaining control over resources and data protected by higher privilege levels.

The system should be updated to the following versions: macOS Sequoia 15.4, macOS Sonoma 14.7.5, or macOS Ventura 13.7.5. Updates are available through the Software Update mechanism in macOS and on the manufacturer's pages: https://support.apple.com/en-us/122373, https://support.apple.com/en-us/122374, https://support.apple.com/en-us/122375.

Apple macOS Sequoia versions earlier than 15.4, Apple macOS Sonoma versions earlier than 14.7.5, Apple macOS Ventura versions earlier than 13.7.5.