5.5
Medium
CVE-2025-24182 An out-of-bounds read issue was addressed with improved input validation
Description
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| tvOS 18.4 | earliest → < 18.4 | 18.4 |
| iOS and iPadOS 18.4 | earliest → < 18.4 | 18.4 |
| macOS 15.4 | earliest → < 15.4 | 15.4 |
| visionOS 2.4 | earliest → < 2.4 | 2.4 |
| watchOS 11.4 | earliest → < 11.4 | 11.4 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of tvOS
The 1386 CVEs of tvOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium