CVE-2025-24225

published 2025-05-12

CVE-2025-24225: An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead…

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I H A N

An injection issue was addressed with improved input validation. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. Processing an email may lead to user interface spoofing.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apple	ios_18.5_and_ipados	—	—
apple	ios_and_ipados	< 18.5	18.5
apple	ipados	< 17.7.7	17.7.7
apple	ipados	—	—
apple	ipados	>= 18.0 < 18.5	18.5
apple	iphone_os	< 18.5	18.5

CWE-79