Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi

Vulnerability Details

Basic Information

Title Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi
Type thn
Published 2025-05-05T17:06:00
Last Seen 2025-05-05T18:55:41
CVSS Score 9.8 (CRITICAL)

CVSS v3 Details

Attack Vector NETWORK
Attack Complexity LOW
Privileges Required NONE
User Interaction NONE
Scope UNCHANGED
Confidentiality Impact HIGH
Integrity Impact HIGH
Availability Impact HIGH

CVE Information

CVE IDs CVE-2025-24132, CVE-2025-24137, CVE-2025-24206, CVE-2025-24251, CVE-2025-24252, CVE-2025-24270, CVE-2025-24271, CVE-2025-30422, CVE-2025-30445, CVE-2025-31197, CVE-2025-31203
CWE
Bulletin Family info

Description

Cybersecurity researchers have disclosed a series of now-patched security vulnerabilities in Apple's AirPlay protocol that, if successfully exploited, could enable an attacker to take over susceptible devices supporting the proprietary…

Impact Assessment

Base Score 9.8
Severity CRITICAL

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.