Skip to content
fr Sign in
9.8 Critical

CVE-2025-31182 This issue was addressed with improved handling of symlinks

Description

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to delete files for which it does not have permission.

Affected products and versions

Product Affected versions Fixed in
tvOS 18.4 earliest → < 18.4 18.4
iOS and iPadOS 18.4 earliest → < 18.4 18.4
macOS 15.4 earliest → < 15.4 15.4
macOS 14.7 earliest → < 14.7.5 14.7.5
macOS 13.7 earliest → < 13.7.5 13.7.5
visionOS 2.4 earliest → < 2.4 2.4
watchOS 11.4 earliest → < 11.4 11.4

References

Timeline

  1. Published
  2. Last modified

Other CVEs of tvOS

The 1386 CVEs of tvOS →
CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High CVE-2026-86964 A null pointer dereference was addressed with improved input validation 7.5 High CVE-2026-113904 A use-after-free issue was addressed with improved memory management 4.3 Medium
Track this CVE