CVE-2025-46285 — Integer Overflow or Wraparound in Apple IOS AND Ipados

CWE-190 — Integer Overflow or WraparoundCWE-835 — Infinite Loop13 documents6 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 94.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Apple IOS AND IpadosApple MacosApple Tvos+2 more
Timeline
PublishedDec 12

Description

An integer overflow was addressed by adopting 64-bit timestamps. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, tvOS 26.2, visionOS 26.2, watchOS 26.2. An app may be able to gain root privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5apple/macos< 15.7.3+2
▶NVDapple/macos15.0 — 15.7.3+1
▶CVEListV5apple/ios_and_ipados< 18.7.3+1
▶CVEListV5apple/tvos< 26.2
▶CVEListV5apple/watchos< 26.2

🔴Vulnerability Details

2
GHSA
GHSA-p5pj-g9wc-c3v2: An integer overflow was addressed by adopting 64-bit timestamps↗2025-12-12
▶
CVEList
CVE-2025-46285: An integer overflow was addressed by adopting 64-bit timestamps↗2025-12-12
▶

📋Vendor Advisories

9
Apple
CVE-2025-46285: macOS Tahoe 26.2↗2025-12-12
▶
Apple
CVE-2025-46285: iOS 18.7.3 and iPadOS 18.7.3↗2025-12-12
▶
Apple
CVE-2025-46285: macOS Sonoma 14.8.3↗2025-12-12
▶
Apple
CVE-2025-46285: visionOS 26.2↗2025-12-12
▶
Apple
CVE-2025-46285: iOS 26.2 and iPadOS 26.2↗2025-12-12
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-46285 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-46285 — Integer Overflow or Wraparound | cvebase