Main Vulnerability Database Vulnerabilities #VU108013

Use after free in macOS - CVE-2025-24252

Published: April 29, 2025 / Updated: June 13, 2025

Vulnerability identifier: #VU108013

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber

CVE-ID: CVE-2025-24252

CWE-ID: CWE-416

Exploitation vector: Adjecent network

Exploit availability: Public exploit is available

Vendor: Apple Inc.

Affected software:
macOS

Detailed vulnerability description

The vulnerability allows a remote attacker on the local network to compromise the affected system.

The vulnerability exists due to a use-after-free error in AirPlay. A remote attacker on the local network can corrupt process memory.

Install update from vendor's website.