5.5
Medium
CVE-2025-30454 A path handling issue was addressed with improved validation
Description
A path handling issue was addressed with improved validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. A malicious app may be able to access private information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| tvOS 18.4 | earliest → < 18.4 | 18.4 |
| iOS and iPadOS 18.4 | earliest → < 18.4 | 18.4 |
| macOS 15.4 | earliest → < 15.4 | 15.4 |
| macOS 14.7 | earliest → < 14.7.5 | 14.7.5 |
| watchOS 11.4 | earliest → < 11.4 | 11.4 |
Other CVEs of tvOS
The 1386 CVEs of tvOS →
CVE-2026-86972
A buffer overflow was addressed with improved size validation
7.8
High
CVE-2026-113912
An out-of-bounds access issue was addressed with improved bounds checking
7.1
High
CVE-2026-86964
A null pointer dereference was addressed with improved input validation
7.5
High
CVE-2026-113904
A use-after-free issue was addressed with improved memory management
4.3
Medium