← CVE Intelligence

CVE-2025-24271

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

An access issue was addressed with improved access restrictions. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4. An unauthenticated user on the same network as a signed-in Mac could send it AirPlay commands without pairing.

Affected (CNA)

Vendor / productVersions
Apple / iOS and iPadOSaffected 0 before 18.4
Apple / iPadOSaffected 0 before 17.7.6
Apple / macOSaffected 0 before 13.7.5; affected 0 before 14.7.5; affected 0 before 15.4
Apple / tvOSaffected 0 before 18.4
Apple / visionOSaffected 0 before 2.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.