6.5
Medium
CVE-2025-24225 An injection issue was addressed with improved input validation
Description
An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iPadOS 17.7 | earliest → < 17.7.7 | 17.7.7 |
| iOS and iPadOS 18.5 | earliest → < 18.5 | 18.5 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
Timeline
- Published
- Last modified
Other CVEs of iPadOS
The 166 CVEs of iPadOS →
CVE-2026-28950
A logging issue was addressed with improved data redaction
6.2
Medium
CVE-2025-43210
An out-of-bounds access issue was addressed with improved bounds checking
6.3
Medium
CVE-2025-31216
The issue was addressed with improved checks
2.4
Low
CVE-2025-43374
An out-of-bounds read was addressed with improved bounds checking
4.3
Medium