9.8

CVE-2025-31200: Apple Multiple Products Memory Corruption Vulnerability

CVSS: 9.8v3.1CriticalKEVAnalyzed
Published 16-04-2025Last modified 02-04-2026
Open JSON

Vulnerability summary

CVE-2025-31200 is a critical (CVSS 9.8) vulnerability in Apple Multiple Products. It is known to be exploited: CISA lists it, first on 17-04-2025. EPSS estimates a 20.90% chance of exploitation in the next 30 days, higher than 97.5% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)
EPSS score
20.90%
0%100%
High · +2.30 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits2github, reference

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 17-04-2025
    Added to CISA KEVApple Multiple Products Memory Corruption Vulnerability
  3. 08-05-2025
    CISA remediation dueApply mitigations per vendor instructions.
  4. 02-04-2026
    Last modifiedVulnerability information updated.

Description

A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watchOS 11.5. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS released before iOS 18.4.1.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

20.90%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

+2.30 pp

From 18.59% on 19-09-2026

19-09-202619-10-2026
EPSS score
20.90%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
17-04-2025
Federal due date
08-05-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. support.apple.com/en-us/122282 support.apple.com/en-us/122400 support.apple.com/en-us/122401 support.apple.com/en-us/122402 nvd.nist.gov/vuln/detail/CVE-2025-31200

Public exploits

2 found
  • githubUnverified

    Ios Attack Chain Cve 2025 31200 Cve 2025 31201

    Maturity: poc

  • referenceUnverified

    Exploit Reference (blog.noahhw.dev)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Apple7 products

1 vendor · 7 products

References

15 links
Show all 15 references