CVE-2025-31201: tvos — Actively Exploited & Fix

Description

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.

Is your site exposed to CVE-2025-31201?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild.

Added: Apr 17, 2025 Remediation due: May 8, 2025

Weakness Type (CWE)

CWE-1220 CWE-1220

Affected Products

Vendor	Product	Versions
apple	macos	15.0 — 15.4.1
apple	tvos	< 18.4.1
apple	visionos	< 2.4.1
apple	ipados	< 18.4.1
apple	iphone_os	< 18.4.1

References

Advisories & Patches

https://support.apple.com/en-us/122282 https://support.apple.com/en-us/122400 https://support.apple.com/en-us/122401 https://support.apple.com/en-us/122402

Exploits

https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201/blob/main/Remote%20Crypto%20Attack%20Chain%20.md

Other References

http://seclists.org/fulldisclosure/2025/Apr/26 http://seclists.org/fulldisclosure/2025/Jun/14 http://seclists.org/fulldisclosure/2025/Oct/0 http://seclists.org/fulldisclosure/2025/Oct/3 http://seclists.org/fulldisclosure/2025/Oct/4 https://github.com/cisagov/vulnrichment/issues/200 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-31201

Frequently Asked Questions

What is CVE-2025-31201? +

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS. It has a CVSS v3.1 base score of 9.8 (CRITICAL). This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog, indicating active exploitation in the wild.

How severe is CVE-2025-31201? +

CVE-2025-31201 has a CVSS v3.1 score of 9.8 out of 10, rated CRITICAL. This is a critical vulnerability that should be patched immediately.

What products are affected by CVE-2025-31201? +

CVE-2025-31201 affects products from apple, specifically: ipados, iphone_os, macos, tvos, visionos. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-31201? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2021-46747

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application …

CVE-2025-3648

A vulnerability has been identified in the Now Platform that could result in data being inferred without authorization. Under certain …

CVE-2024-21962

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially …

CVE-2026-78216

AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, …

CVE-2026-86338

Ash field_policies are documented to protect against filter-based information disclosure: when a field the actor may not see is referenced …

CVE-2026-78230

AshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, sum, …

CVE-2025-31201