CVE-2025-24120 Use after free in macOS

High 7.5 Published 27 Jan 2025 Updated 2 Apr 2026

An attacker can cause unexpected app termination in macOS due to improper object lifetime management, requiring a system update.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-24120?

CVE-2025-24120 is a high-severity use after free vulnerability in Apple Macos, published on 27 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

This issue was addressed by improved management of object lifetimes. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An attacker may be able to cause unexpected app termination.

Weakness: CWE-772

Which versions are affected by CVE-2025-24120?

It affects 1 product.

Products include Apple Macos.

How do I fix CVE-2025-24120?

No fix has been published for CVE-2025-24120 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2025-24120 being exploited?

There is no known exploitation of CVE-2025-24120 in the wild and no public exploit code.

All Apple Macos vulnerabilities

Sources

Also known as GHSA-46pj-m82h-8px5.