What is CVE-2025-24213?

CVE-2025-24213 is a high-severity vulnerability in Apple iOS And Ipados, classified under Access of Resource Using Incompatible Type (Type Confusion). CVSS score: 7.8/10. Published 2025-03-31.

How severe is CVE-2025-24213?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2025-24213 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Apple iOS And Ipados

CVE-2025-24213

This issue was addressed with improved handling of floats. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. A type confusion issue could lead to memory corruption.

EPSS: 0.004 (33.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Apple Ios And Ipados — versions 0
Apple Ipados — versions 0
Apple Iphone_os
Apple Macos — versions 0
Apple Safari — versions 0
Apple Tvos — versions 0
Apple Visionos — versions 0
Apple Watchos — versions 0

Weakness classification (CWE)

CWE-843 — Access of Resource Using Incompatible Type (Type Confusion)

Public proof-of-concept exploits

w4zu/Debian_

References

Frequently asked questions

What is CVE-2025-24213?: CVE-2025-24213 is a high-severity vulnerability in Apple iOS And Ipados, classified under Access of Resource Using Incompatible Type (Type Confusion). CVSS score: 7.8/10. Published 2025-03-31.
How severe is CVE-2025-24213?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2025-24213 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.