ZDI-25-728 - Apple Mac OS X, Apple Ipados and Apple Tvos
Low
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the MediaToolbox framework is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-31239.
Affected software
Apple Mac OS X
Apple Ipados
Apple Tvos
Apple Macos
Apple watchOS
Apple Visionos
Apple iPhone OS