Apple on Wednesday launched safety updates for iOS, iPadOS, macOS Sequoia, tvOS, and visionOS to deal with two safety flaws that it stated have come underneath lively exploitation within the wild.
The vulnerabilities in query are listed under –
- CVE-2025-31200 (CVSS rating: 7.5) – A reminiscence corruption vulnerability within the Core Audio framework that might permit code execution when processing an audio stream in a maliciously crafted media file
- CVE-2025-31201 (CVSS rating: 6.8) – A vulnerability within the RPAC part that might be utilized by an attacker with arbitrary learn and write functionality to bypass Pointer Authentication
The iPhone maker stated it addressed CVE-2025-31200 with improved bounds checking and CVE-2025-31201 by eradicating the susceptible part of code.
Each the vulnerabilities have been credited to Apple, together with Google Menace Evaluation Group (TAG) for reporting CVE-2025-31200.
Apple, as is usually the case with such advisories, stated it is conscious that the problems have been “exploited in a particularly refined assault in opposition to particular focused people on iOS.”
With the most recent growth, Apple has addressed a complete of 5 actively exploited zero-days in its software program because the begin of the yr –
- CVE-2025-24085 (CVSS rating: 7.8) – A use-after-free bug within the Core Media part that might allow a malicious software already put in on a tool to raise privileges
- CVE-2025-24200 (CVSS rating: 4.6) – An authorization subject within the Accessibility part that might allow an attacker to disable USB Restricted Mode on a locked gadget as a part of a cyber-physical assault
- CVE-2025-24201 (CVSS rating: 7.1) – An out-of-bounds write subject within the WebKit part that might be exploited to interrupt out of the Net Content material sandbox utilizing maliciously crafted internet content material
The updates can be found for the next units and working methods –
- iOS 18.4.1 and iPadOS 18.4.1 – iPhone XS and later, iPad Professional 13-inch, iPad Professional 13.9-inch third era and later, iPad Professional 11-inch 1st era and later, iPad Air third era and later, iPad seventh era and later, and iPad mini fifth era and later
- macOS Sequoia 15.4.1 – Macs working macOS Sequoia
- tvOS 18.4.1 – Apple TV HD and Apple TV 4K (all fashions)
- visionOS 2.4.1 – Apple Imaginative and prescient Professional
In mild of lively exploitation, customers are suggested to replace their units to the most recent model to safeguard in opposition to dangers.
