---
id: "CVE-2024-23225"
kind: "vulnerability"
aliases: ["CVE-2024-23225"]
title: "A memory corruption issue was addressed with improved validation"
severity: "high"
cvss: 7.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["16.7.6"], "affected": "< 16.7.6", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["17.4"], "affected": ">= 17.0, < 17.4", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["16.7.6"], "affected": "< 16.7.6", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["17.4"], "affected": ">= 17.0, < 17.4", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["12.7.4"], "affected": ">= 12.0, < 12.7.4", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["13.6.5"], "affected": ">= 13.0, < 13.6.5", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["14.4"], "affected": ">= 14.0, < 14.4", "ecosystem": "vendor"}, {"name": "apple tvos", "fixed": ["17.4"], "affected": "< 17.4", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["1.1"], "affected": "< 1.1", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["10.4"], "affected": "< 10.4", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "ios", "ipados", "macos", "tvos", "visionos", "watchos"]
not_affected_if: ["fixed-os-version-installed"]
published_at: "2024-03-05T20:16:01+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23225", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23225", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# A memory corruption issue was addressed with improved validation

A memory corruption flaw in the Apple kernel across iOS, iPadOS, macOS, tvOS, watchOS and visionOS lets code bypass kernel memory protections. It is listed as exploited in the wild, and the attacker needs arbitrary kernel read and write capability first.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?
- vendor:apple ipados affected < 16.7.6 fixed 16.7.6
- vendor:apple ipados affected >= 17.0, < 17.4 fixed 17.4
- vendor:apple iphone os affected < 16.7.6 fixed 16.7.6
- vendor:apple iphone os affected >= 17.0, < 17.4 fixed 17.4
- vendor:apple macos affected >= 12.0, < 12.7.4 fixed 12.7.4
- vendor:apple macos affected >= 13.0, < 13.6.5 fixed 13.6.5
- vendor:apple macos affected >= 14.0, < 14.4 fixed 14.4
- vendor:apple tvos affected < 17.4 fixed 17.4
- vendor:apple visionos affected < 1.1 fixed 1.1
- vendor:apple watchos affected < 10.4 fixed 10.4

## How to check

Check the device OS version in Settings > General > About (iOS/iPadOS) or About This Mac (macOS) against Apple's security release notes for CVE-2024-23225.

## Fix

Update to the Apple OS release that lists CVE-2024-23225 as fixed; the sources do not name the version.
If no update is available, follow the vendor mitigation instructions named in the CISA required action.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-23225
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2024-23225

## From the sources

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_