CVE-2025-24154 is a critical out-of-bounds write (CVSS 9.1) in Apple operating systems that may let an attacker corrupt kernel memory or cause an unexpected restart. Apple fixed it in iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3 and visionOS 2.3. Update your devices.
What's affected
The NVD record lists Apple iPadOS, iPhone OS, macOS and visionOS. Apple's notes say the issue is fixed in these releases: iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3 and visionOS 2.3. Earlier builds of those lines are the ones to treat as affected. Apple's bulletin also lists which device models each update covers, so read it for your hardware.
Apple's own description is short: an out-of-bounds write was addressed with improved input validation, and an attacker may be able to cause unexpected system termination or corrupt kernel memory.
The record is not on the CISA Known Exploited Vulnerabilities list, and the Apple page I read for the iOS 18.3 content does not state that this specific issue is exploited.
The weaknesses are classed as CWE-757 (selection of less secure algorithm during negotiation) and CWE-787 (out-of-bounds write). The score is 9.1 (CRITICAL). The vector, CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H, reads as reachable over the network, low attack complexity, no privileges required and no user interaction. Impact is no on confidentiality, high on integrity and high on availability. The record was published on 2025-01-27.
Apple names the fixed releases above. The macOS and visionOS bulletins are linked from the record, so move to the latest build for your major version if you can.
How to check if you're exposed
Checking is quick on a single device and worth scripting across a fleet.
- On iPhone or iPad, open Settings, then General, then About, and read the iOS or iPadOS version. Anything below 18.3 on that line is affected.
- On a Mac, open the Apple menu and choose About This Mac, or run this in Terminal.
sw_vers
- Compare the ProductVersion with 15.3 for Sequoia, 14.7.3 for Sonoma and 13.7.3 for Ventura. Older macOS lines are not named in the record, so check Apple's bulletins for them.
- For Apple Vision Pro, check Settings, then General, then About, and compare with visionOS 2.3.
- If you use mobile device management, filter your inventory by OS version and list everything below the fixed release.
What to do now
- Update iPhones and iPads to iOS or iPadOS 18.3 or later.
- Update Macs to macOS Sequoia 15.3, Sonoma 14.7.3 or Ventura 13.7.3 or later, depending on the line they run.
- Update Apple Vision Pro to visionOS 2.3 or later.
- Use your device management tool to report any device still below the fixed version, and set an update deadline.
- For devices that cannot take the update, plan to retire them or keep them off sensitive networks.
Why it matters
An out-of-bounds write, listed as CWE-787, means code writes data past the end of a buffer it was given. Inside the kernel, the most privileged part of the operating system, a stray write can corrupt memory that the whole system depends on. At best the device restarts. At worst the memory corruption becomes a foothold, which is why kernel issues earn high integrity and availability scores.
The record also lists CWE-757, a selection of a less secure choice during negotiation. The score here is 9.1 with a network vector and no privileges. Apple's text, though, speaks of what an attacker may be able to do and gives few details, so read the score as a ceiling and not a prediction. The sensible response is routine: update promptly, and keep a current view of your device versions.
If you track many applications, the free in-browser dependency scan at gold.safeguard.sh/scan can show which of your components have known CVEs, and the Gold directory lists each one with its fix status.
Quick check
Which updates fix CVE-2025-24154?
iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3 and visionOS 2.3, according to Apple's notes in the record.
Is this known to be exploited?
The record is not on the CISA Known Exploited Vulnerabilities list, and the Apple page I read does not say it is exploited. That can change, so update regardless.
Sources
- Safeguard Gold entry for CVE-2025-24154
- NVD record data for CVE-2025-24154 (published 2025-01-27)
- About the security content of iOS 18.3 and iPadOS 18.3
Last reviewed: 19 October 2026.
