CVE-2025-31201

high-risk

Published 2025-04-16

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Do I need to act?

2.3% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

CISA KEV: actively exploited in the wild

On the Known Exploited Vulnerabilities catalog — federal agencies must patch

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (5)

Macos

Tvos

Visionos

Ipados

Iphone Os

Affected Vendors

Apple

References (12)

Release Notes https://support.apple.com/en-us/122282

Release Notes https://support.apple.com/en-us/122400

Release Notes https://support.apple.com/en-us/122401

Release Notes https://support.apple.com/en-us/122402

Mailing List http://seclists.org/fulldisclosure/2025/Apr/26

Mailing List http://seclists.org/fulldisclosure/2025/Jun/14

Mailing List http://seclists.org/fulldisclosure/2025/Oct/0

Mailing List http://seclists.org/fulldisclosure/2025/Oct/3

Mailing List http://seclists.org/fulldisclosure/2025/Oct/4

Exploit https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/mai...

Issue Tracking https://github.com/cisagov/vulnrichment/issues/200

US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-...

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 12/34 · Low

Exposure 12/34 · Low