VDB
GHSA-9cmh-qh3j-rrp8
GHSA-9cmh-qh3j-rrp8
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published January 28, 2025
The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. Parsing a file may lead to an unexpected app termination.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- Jan 28, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-9cmh-qh3j-rrp8
vulnetix vdb fixes GHSA-9cmh-qh3j-rrp8Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-9cmh-qh3j-rrp8/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/122066 url
- https://support.apple.com/en-us/122067 url
- https://support.apple.com/en-us/122068 url
- http://seclists.org/fulldisclosure/2025/Jan/13 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24161 advisory
- https://support.apple.com/en-us/122069 url
- https://support.apple.com/en-us/122071 url
- https://support.apple.com/en-us/122072 url
- https://support.apple.com/en-us/122073 url
- http://seclists.org/fulldisclosure/2025/Jan/14 url
- http://seclists.org/fulldisclosure/2025/Jan/15 url
- http://seclists.org/fulldisclosure/2025/Jan/16 url
- http://seclists.org/fulldisclosure/2025/Jan/18 url
- http://seclists.org/fulldisclosure/2025/Jan/19 url