CVE-2025-24132

—

CVSS 3.1

6.5 medium

EPSS

3%p87

Published

Apr 30, 2025 (Apr 30, 2025)

Modified

Jun 17, 2026

Description

The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.

Vendors: apple
Products: airplay audio software development kit, airplay video software development kit, carplay communication plug-in
Weakness: CWE-119
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.2%)

In the news2 stories

Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi

The Hacker NewsMay 6, 07:42 UTC · May 6, 2025Vulnerability CVE-2025-24252 CVE-2025-24132 CVE-2025-24206+8 CVEs

AirBorne flaws can lead to fully hijack Apple devices

Security AffairsApr 30, 05:36 UTC · Apr 30, 2025Ransomware CVE-2025-24252 CVE-2025-24132 CVE-2025-24206