VDB
GHSA-rrg9-j69g-xfm7
GHSA-rrg9-j69g-xfm7
PUBLISHED
CVSS 8 HIGH
Record from GitHub Advisory Database · Published January 28, 2025
A type confusion issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.4, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A remote attacker may cause an unexpected application termination or arbitrary code execution.
Risk scores
CVSS 3.1
8
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
- Jan 28, 2025 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rrg9-j69g-xfm7
vulnetix vdb fixes GHSA-rrg9-j69g-xfm7Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rrg9-j69g-xfm7/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-24137 advisory
- http://seclists.org/fulldisclosure/2025/Jan/13 url
- http://seclists.org/fulldisclosure/2025/Jan/16 url
- http://seclists.org/fulldisclosure/2025/Jan/19 url
- http://seclists.org/fulldisclosure/2025/Jan/14 url
- http://seclists.org/fulldisclosure/2025/Jan/15 url
- http://seclists.org/fulldisclosure/2025/Jan/18 url
- https://support.apple.com/en-us/122066 advisory
- https://support.apple.com/en-us/122067 advisory
- https://support.apple.com/en-us/122068 advisory
- https://support.apple.com/en-us/122069 advisory
- https://support.apple.com/en-us/122071 advisory
- https://support.apple.com/en-us/122072 advisory
- https://support.apple.com/en-us/122073 advisory