Skip to content
fr Sign in
5.4 Medium

CVE-2025-24271 An access issue was addressed with improved access restrictions

Description

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing.

Affected products and versions

Product Affected versions Fixed in
tvOS 18.4 earliest → < 18.4 18.4
iOS and iPadOS 18.4 earliest → < 18.4 18.4
iPadOS 17.7 earliest → < 17.7.6 17.7.6
macOS 15.4 earliest → < 15.4 15.4
macOS 14.7 earliest → < 14.7.5 14.7.5
macOS 13.7 earliest → < 13.7.5 13.7.5
visionOS 2.4 earliest → < 2.4 2.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE