CVE-2025-24182: Apple iPadOS

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing a maliciously crafted font may result in the disclosure of process memory.

Affected products

• Apple iPadOS: before 18.4 (fixed in 18.4)
• Apple iPhone OS: before 18.4 (fixed in 18.4)
• Apple macOS: from 15.0, before 15.4 (fixed in 15.4)
• Apple visionOS: before 2.4 (fixed in 2.4)

Published 2025-03-31. Last modified 2026-06-17.