Apple Carplay Communication Plug-In vulnerabilities

2 CVEs affecting Apple Carplay Communication Plug-In, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-30422, published 2025-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-24132, published 2025-04-30. Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days. The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app…
CVE-2025-30422, published 2025-04-30. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an…