Skip to content
fr Sign in
4.3 Medium

CVE-2025-31239 A use-after-free issue was addressed with improved memory management

Description

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6, tvOS 18.5, visionOS 2.5, watchOS 11.5. Parsing a file may lead to an unexpected app termination.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitable remotely over the network, without an account and if a user takes an action; the impact on data or service is limited.

Attack vector
Network
Attack complexity
Low
Privileges required
None
Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
Low

Affected products and versions

Product Affected versions Fixed in
tvOS 18.5 earliest → < 18.5 18.5
macOS 15.5 earliest → < 15.5 15.5
macOS 14.7 earliest → < 14.7.6 14.7.6
macOS 13.7 earliest → < 13.7.6 13.7.6
iPadOS 17.7 earliest → < 17.7.7 17.7.7
iOS and iPadOS 18.5 earliest → < 18.5 18.5
visionOS 2.5 earliest → < 2.5 2.5
watchOS 11.5 earliest → < 11.5 11.5

References

Timeline

  1. Published
  2. Last modified

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE