{"id":"CVE-2025-24153","published":"2025-01-27T21:45:36Z","modified":"2026-04-02T18:10:43Z","title":"A buffer overflow issue was addressed with improved memory handling","vendor":"Apple","product":"macOS","tier":"tail","description":{"text":"A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.3. An app with root privileges may be able to execute arbitrary code with kernel privileges.","provenance":"source","from":"CVE.org"},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00244,"percentile":0.15607,"provenance":"source"},"cwes":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input"}],"references":[{"url":"https://support.apple.com/en-us/122068","tags":[]},{"url":"http://seclists.org/fulldisclosure/2025/Jan/15","tags":[]}],"priority":{"score":7.8,"factors":[{"name":"EPSS percentile","points":3.12},{"name":"CVSS severity","points":4.69}]},"vendorSlug":"apple","affectedVersions":[{"vendor":"Apple","product":"macOS","versions":["< 15.3"]}],"euvd":{"id":"EUVD-2025-3657","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-apple-ios-macos-cwe-120"}}