{"id":"CVE-2025-24132","state":"PUBLISHED","title":"The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an","description":"The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.","publishedAt":"2025-04-30T20:48:15.055Z","updatedAt":"2026-04-02T18:11:17.708Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple AirPlay audio SDK","Apple AirPlay video SDK"],"affected":[{"vendor":"Apple","product":"AirPlay audio SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]},{"vendor":"Apple","product":"AirPlay video SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/122403"],"weaknesses":["CWE-119"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/24xxx/CVE-2025-24132.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-24132","state":"PUBLISHED","datePublished":"2025-04-30T20:48:15.055Z","dateUpdated":"2026-04-02T18:11:17.708Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-01-17T00:00:44.974Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination."}],"affected":[{"vendor":"Apple","product":"AirPlay audio SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]},{"vendor":"Apple","product":"AirPlay video SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/122403"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An attacker on the local network may cause an unexpected app termination"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:11:17.708Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-01T13:12:19.960424Z","id":"CVE-2025-24132","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-01T13:12:34.035Z"}}]}}}