CVE-2025-31185: Input Validation
First published: Mon Jan 27 2025(Updated: )
Accessibility. An authentication issue was addressed with improved state management.
Credit: Uri Katz (Oligo Security) Minghao Lin @Y1nKoc Zhejiang Universitybabywu Zhejiang University Zhejiang UniversityXingwei Lin Zhejiang UniversityGoogle Threat Analysis Group Desmond Trend Micro Zero Day InitiativePwn2car & Rotiple (HyeongSeok Jang) Trend Micro Zero Day InitiativeCVE-2025-24085 Song Hyun Bae @bshyuunn Lee Dong Ha (Who4mI) Wang Yu CyberservalDongJun Kim @smlijun JongSeong Kim in Enki WhiteHat @nevul37 D4m0n Mateusz Krzywicki @krzywix an anonymous researcher pattern-f @pattern_F_ Michael (Biscuit) Thomas @social.lol) @biscuit Guilherme Rambo Best Buddy AppsIvan Fratric Google Project ZeroHichem Maloufi Hakim Boukhadra Mickey Jin @patch1t mastersplinter Jason Gendron @gendron_jason 이준성 (Junsung Lee) @RenwaX23 Michael DePlante @izobashi Trend Micro Zero Day InitiativeKirin @Pwnrin Q1IQ @q1iqF NUS CuriOSityP1umer @p1umer Imperial Global Singaporelinjy HKUS3Labchluo WHUSecLabJohan Carlsson (joaxcar) Abhay Kailasia @abhay_kailasia C
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS and iPadOS | <18.3 | 18.3 |
| Apple iOS, iPadOS, and macOS | <18.3 | 18.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/122066 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2025-24141
- CVE-2025-24126
- CVE-2025-24129
- CVE-2025-24131
- CVE-2025-24177
- CVE-2025-24179
- CVE-2025-24137
- CVE-2025-24127
- CVE-2025-24160
- CVE-2025-24161
- CVE-2025-24163
- CVE-2025-24123
- CVE-2025-24124
- CVE-2025-24085
- CVE-2025-24184
- CVE-2025-24111
- CVE-2025-24086
- CVE-2025-24144
- CVE-2025-24107
- CVE-2025-24159
- CVE-2025-24117
- CVE-2025-24091
- CVE-2024-55549
- CVE-2025-24855
- CVE-2025-24104
- CVE-2025-31262
- CVE-2024-9956
- CVE-2025-31185
- CVE-2025-24128
- CVE-2025-24113
- CVE-2025-24149
- CVE-2025-24145
- CVE-2025-24154
- CVE-2025-24189
- CVE-2025-24143
- CVE-2025-24158
- CVE-2025-24162
- CVE-2025-24150
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/source
- agent/softwarecombine
- agent/tags
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- collector/apple-support
- source/Apple
- alias/CVE-2025-24107
- alias/CVE-2025-24159
- alias/CVE-2025-24117
- alias/CVE-2025-24091
- alias/CVE-2024-55549
- alias/CVE-2025-24855
- alias/CVE-2025-24104
- alias/CVE-2025-31262
- alias/CVE-2024-9956
- alias/CVE-2025-31185
- alias/CVE-2025-24128
- alias/CVE-2025-24113
- alias/CVE-2025-24149
- alias/CVE-2025-24145
- alias/CVE-2025-24154
- alias/CVE-2025-24189
- alias/CVE-2025-24143
- alias/CVE-2025-24158
- alias/CVE-2025-24162
- alias/CVE-2025-24150
- agent/software-canonical-lookup
- alias/CVE-2025-24127
- alias/CVE-2025-24160
- alias/CVE-2025-24161
- alias/CVE-2025-24163
- alias/CVE-2025-24123
- alias/CVE-2025-24124
- alias/CVE-2025-24085
- alias/CVE-2025-24184
- alias/CVE-2025-24111
- alias/CVE-2025-24086
- alias/CVE-2025-24144
- alias/CVE-2025-24126
- alias/CVE-2025-24129
- alias/CVE-2025-24131
- alias/CVE-2025-24177
- alias/CVE-2025-24179
- alias/CVE-2025-24137
- vendor/apple
- canonical/apple ios and ipados
- canonical/apple ios, ipados, and macos