---
id: "CVE-2025-24085"
kind: "vulnerability"
aliases: ["CVE-2025-24085"]
title: "A use after free issue was addressed with improved memory management"
severity: "critical"
cvss: 10.0
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Apple Multiple Products", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["17.7.6"], "affected": "< 17.7.6", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["18.3"], "affected": ">= 18.0, < 18.3", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["18.3"], "affected": "< 18.3", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["13.7.5"], "affected": ">= 13.0, < 13.7.5", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["14.7.5"], "affected": ">= 14.0, < 14.7.5", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["15.3"], "affected": ">= 15.0, < 15.3", "ecosystem": "vendor"}, {"name": "apple tvos", "fixed": ["18.3"], "affected": "< 18.3", "ecosystem": "vendor"}, {"name": "apple visionos", "fixed": ["2.3"], "affected": "< 2.3", "ecosystem": "vendor"}, {"name": "apple watchos", "fixed": ["11.3"], "affected": "< 11.3", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple", "exploited", "infrastructure", "ios", "macos", "self-hosted"]
not_affected_if: ["unpatched-devices-not-in-use"]
published_at: "2025-01-27T22:15:14+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:05+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24085", "first_seen_at": "2026-10-23T22:29:05+00:00"}]
---

# A use after free issue was addressed with improved memory management

A use-after-free bug in multiple Apple products, including iOS and macOS, can be triggered to let a malicious app elevate its privileges. CISA lists it as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple Multiple Products affected ? fixed ?
- vendor:apple ipados affected < 17.7.6 fixed 17.7.6
- vendor:apple ipados affected >= 18.0, < 18.3 fixed 18.3
- vendor:apple iphone os affected < 18.3 fixed 18.3
- vendor:apple macos affected >= 13.0, < 13.7.5 fixed 13.7.5
- vendor:apple macos affected >= 14.0, < 14.7.5 fixed 14.7.5
- vendor:apple macos affected >= 15.0, < 15.3 fixed 15.3
- vendor:apple tvos affected < 18.3 fixed 18.3
- vendor:apple visionos affected < 2.3 fixed 2.3
- vendor:apple watchos affected < 11.3 fixed 11.3

## Fix

Apply the mitigations Apple specifies for this CVE or update to the patched Apple OS release; the sources do not name the exact versions. Discontinue use of unpatched devices if mitigations are unavailable, per CISA.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-24085
- 2026-10-23T22:29:05+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-24085

## From the sources

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.6, macOS Sequoia 15.3, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.3, visionOS 2.3, watchOS 11.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_