CVE-2025-24226: Infoleak
Published Mar 31, 2025
·Updated
IDE Assets. The issue was addressed with improved checks.
Other sources
The issue was addressed with improved checks. This issue is fixed in Xcode 16.3. A malicious app may be able to access private information.
— MITRE
Credit
Mickey Jin@@patch1t, Claudio Bozzato(Cisco Talos), Francesco Benvenuto(Cisco Talos), Wojciech Regula(SecuRing)
Affected Software
2 affected componentsFixes available
Apple Xcode<16.3
16.3
Apple Xcode<16.3
Event History
Mar 31, 2025
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·10:23 PM
Data Sourced
via MITRE·10:23 PM
DescriptionWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-24226?
CVE-2025-24226 is considered a moderate severity vulnerability due to potential unauthorized access to private information.
2
How do I fix CVE-2025-24226?
To fix CVE-2025-24226, upgrade to Xcode version 16.3 or later.
3
What is affected by CVE-2025-24226?
CVE-2025-24226 affects Apple Xcode versions prior to 16.3.
4
What potential threat does CVE-2025-24226 pose?
CVE-2025-24226 allows a malicious app to potentially access private information.
5
When was CVE-2025-24226 addressed?
CVE-2025-24226 was addressed in Xcode version 16.3.