Vulnerabilities

CVSS

6.5 Medium

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Risk score

52.0

Published

2025-05-12

Status

Modified

A double free issue was addressed with improved memory management. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to cause unexpected system termination.

Weaknesses

CWE-415

Coverage 1

vulnerability

Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

Researchers at Google Project Zero discovered and exploited a type confusion vulnerability (CVE-2024-54529) within the coreaudiod system daemon in macOS. The vulnerability, stemming from a double-free, allowed for heap m…

Google Project Zero · Jan 30, 2026 Critical

CVE-2024-54529CVE-2025-31235macosvulnerabilityheap

All articles mentioning it

Advisories and references

• support.apple.com/en-us/122405
• support.apple.com/en-us/122716
• support.apple.com/en-us/122717
• support.apple.com/en-us/122718
• seclists.org/fulldisclosure/2025/May/6
• seclists.org/fulldisclosure/2025/May/7
• seclists.org/fulldisclosure/2025/May/8
• seclists.org/fulldisclosure/2025/May/9