VDB
GHSA-8h8h-4h46-6wx3
GHSA-8h8h-4h46-6wx3
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Record from GitHub Advisory Database · Published April 1, 2025
A buffer overflow was addressed with improved bounds checking. This issue is fixed in visionOS 2.4, macOS Ventura 13.7.5, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5. An app may be able to cause unexpected system termination.
Risk scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Timeline
- Apr 1, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-8h8h-4h46-6wx3
vulnetix vdb fixes GHSA-8h8h-4h46-6wx3
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-8h8h-4h46-6wx3/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/122378 url
- http://seclists.org/fulldisclosure/2025/Apr/12 url
- https://support.apple.com/en-us/122374 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24237 advisory
- https://support.apple.com/en-us/122372 url
- http://seclists.org/fulldisclosure/2025/Apr/10 url
- http://seclists.org/fulldisclosure/2025/Apr/8 url
- https://support.apple.com/en-us/122371 url
- https://support.apple.com/en-us/122373 url
- http://seclists.org/fulldisclosure/2025/Apr/4 url
- https://support.apple.com/en-us/122375 url
- https://support.apple.com/en-us/122376 url
- http://seclists.org/fulldisclosure/2025/Apr/13 url
- http://seclists.org/fulldisclosure/2025/Apr/5 url
- http://seclists.org/fulldisclosure/2025/Apr/9 url