BaseFortify

Publication date: 2025-04-30

Last updated on: 2026-04-02

Assigner: Apple Inc.

Description

The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-04-30

Last Modified

2026-04-02

Generated

2026-07-23

AI Q&A

2025-05-01

EPSS Evaluated

2026-07-22

NVD

CVE-2025-24132

Affected Vendors & Products

Vendor	Product	Version / Range
apple	airplay_audio_software_development_kit	to 2.7.1 (exc)
apple	airplay_video_software_development_kit	to 3.6.0.126 (exc)
apple	carplay_communication_plug-in	to r18.1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

The vulnerability is due to improper memory handling that allowed an attacker on the local network to cause an unexpected app termination. It has been addressed by improving memory handling and by releasing updates in specific SDK versions (AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1). [1]

Impact Analysis

If an attacker on your local network exploits this vulnerability, they could force your application to terminate unexpectedly. This could lead to a denial of service condition or disruption in the normal functionality of the affected application. [1]

Mitigation Strategies

Upgrade to the fixed versions as addressed in the CVE: AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, and CarPlay Communication Plug-in R18.1. [1]

Hi! I’m here to help you understand CVE-2025-24132. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70