VDB
GHSA-m773-p743-chvm
GHSA-m773-p743-chvm
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published April 1, 2025
A privacy issue was addressed by not logging contents of text fields. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, tvOS 18.4, macOS Sequoia 15.4. An app may be able to access sensitive user data.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Apr 1, 2025 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-m773-p743-chvm
vulnetix vdb fixes GHSA-m773-p743-chvmOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-m773-p743-chvm/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/122373 url
- http://seclists.org/fulldisclosure/2025/Apr/8 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-24214 advisory
- https://support.apple.com/en-us/122376 url
- https://support.apple.com/en-us/122377 url
- http://seclists.org/fulldisclosure/2025/Apr/11 url
- http://seclists.org/fulldisclosure/2025/Apr/13 url
- https://support.apple.com/en-us/122371 url
- https://support.apple.com/en-us/122378 url
- http://seclists.org/fulldisclosure/2025/Apr/12 url
- http://seclists.org/fulldisclosure/2025/Apr/4 url