CVE-2025-30453: Use After Free
First published: Mon May 12 2025(Updated: )
afpfs. The issue was addressed with improved memory handling.
Credit: Hossein Lotfi @hosselot Trend Micro Zero Day InitiativeCsaba Fitzl @theevilbit Kandjian anonymous researcher Dayton Pidhirney Atredis PartnersLyutoon YenKoc Mateusz Krzywicki @krzywix Michael DePlante @izobashi Trend Micro Zero Day InitiativeLucas Leong @_wmliang_ Trend Micro Zero Day InitiativeChristian Kohlschütter CVE-2024-8176 Paweł Płatek (Trail BitsLFY @secsys Fudan Universitywac Dave G. Kirin @Pwnrin 7feilee Eric Dorphy Twin Cities App Dev LLCAdam M. Lyutoon Atredis PartnersYenKoc Atredis PartnersCVE-2025-26465 CVE-2025-26466 Joseph Ravichandran @0xjprx MIT CSAILDillon Franke Google Project Zerowac Trend Micro Zero Day Initiative
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <13.7.6 | 13.7.6 | |
| Apple macOS | <14.7.6 | 14.7.6 |
| macOS Ventura | <13.7.6 | 13.7.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/122718 (Advisory)
- https://support.apple.com/en-us/122717 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2025-31240
- CVE-2025-31237
- CVE-2025-31251
- CVE-2025-31235
- CVE-2025-31208
- CVE-2025-31196
- CVE-2025-31209
- CVE-2025-31239
- CVE-2025-31233
- CVE-2025-30453
- CVE-2025-24258
- CVE-2025-30448
- CVE-2025-31232
- CVE-2025-24144
- CVE-2025-31219
- CVE-2025-31241
- CVE-2024-8176
- CVE-2025-30440
- CVE-2025-31222
- CVE-2025-24274
- CVE-2025-24142
- CVE-2025-31245
- CVE-2025-31224
- CVE-2025-31221
- CVE-2025-31213
- CVE-2025-31247
- CVE-2025-30442
- CVE-2025-31242
- CVE-2025-31220
- CVE-2025-24155
- CVE-2025-31246
- CVE-2025-26465
- CVE-2025-26466
Frequently Asked Questions
What is the severity of CVE-2025-30453?
CVE-2025-30453 has been classified with a high severity due to memory handling issues that could lead to potential exploitation.
How do I fix CVE-2025-30453?
To fix CVE-2025-30453, users should update their macOS devices to the latest versions 13.7.6 for Ventura and 14.7.6 for Sonoma.
What vulnerabilities does CVE-2025-30453 address?
CVE-2025-30453 addresses vulnerabilities in afpfs, AppleJPEG, and CoreAudio, among others, mainly related to memory management and input sanitization.
Which Apple products are affected by CVE-2025-30453?
CVE-2025-30453 affects macOS Ventura (up to version 13.7.6) and macOS Sonoma (up to version 14.7.6).
Is there a public disclosure for CVE-2025-30453?
Yes, CVE-2025-30453 has been publicly disclosed by Apple and can be referenced in their security advisories.
- collector/apple-support
- source/Apple
- alias/CVE-2025-30453
- alias/CVE-2025-24258
- alias/CVE-2025-30448
- alias/CVE-2025-31232
- alias/CVE-2025-24144
- alias/CVE-2025-31219
- alias/CVE-2025-31241
- alias/CVE-2024-8176
- alias/CVE-2025-30440
- alias/CVE-2025-31222
- alias/CVE-2025-24274
- alias/CVE-2025-24142
- alias/CVE-2025-31245
- alias/CVE-2025-31224
- alias/CVE-2025-31221
- alias/CVE-2025-31213
- alias/CVE-2025-31247
- alias/CVE-2025-30442
- alias/CVE-2025-31242
- alias/CVE-2025-31220
- alias/CVE-2025-24155
- alias/CVE-2025-31239
- alias/CVE-2025-31233
- alias/CVE-2025-26465
- alias/CVE-2025-26466
- agent/software-canonical-lookup
- alias/CVE-2025-31240
- alias/CVE-2025-31237
- alias/CVE-2025-31251
- alias/CVE-2025-31235
- alias/CVE-2025-31208
- alias/CVE-2025-31196
- alias/CVE-2025-31209
- agent/last-modified-date
- agent/weakness
- agent/source
- agent/type
- agent/softwarecombine
- agent/tags
- agent/references
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- vendor/apple
- canonical/apple macos
- canonical/macos ventura