{"id":"CVE-2025-30422","state":"PUBLISHED","title":"A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may","description":"A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.","publishedAt":"2025-04-30T20:48:15.738Z","updatedAt":"2026-04-02T18:14:32.762Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple AirPlay audio SDK","Apple AirPlay video SDK"],"affected":[{"vendor":"Apple","product":"AirPlay audio SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]},{"vendor":"Apple","product":"AirPlay video SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/122403"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/30xxx/CVE-2025-30422.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-30422","state":"PUBLISHED","datePublished":"2025-04-30T20:48:15.738Z","dateUpdated":"2026-04-02T18:14:32.762Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2025-03-22T00:04:43.714Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination."}],"affected":[{"vendor":"Apple","product":"AirPlay audio SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]},{"vendor":"Apple","product":"AirPlay video SDK","versions":[{"version":"0","status":"affected","lessThan":"2.7.1","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/122403"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An attacker on the local network may cause an unexpected app termination"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2026-04-02T18:14:32.762Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.5,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-01T13:09:38.751434Z","id":"CVE-2025-30422","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-01T13:09:41.671Z"}}]}}}