Skip to content
Appaloosa Scout

iPadOS

iPadOS 17.7.7

Official advisory

30 CVEs fixed by this release.

Release date
2025-05-12
End of support
2025-09-15 EOL
CVEs fixed
30
CISA KEV
0
Critical
0
High
1
NVD pending
29

CVEs fixed

CVE Severity
CVE-2024-8176

[Apple libexpat] Multiple issues in libexpat, including unexpected app termination or arbitrary code execution

HIGH 7.5
CVE-2025-24097

[Apple AirDrop] An app may be able to read arbitrary file metadata

N/A
CVE-2025-24111

[Apple Display] An app may be able to cause unexpected system termination

N/A
CVE-2025-24144

[Apple Kernel] An app may be able to leak sensitive kernel state

N/A
CVE-2025-24213

[Apple WebKit] A type confusion issue could lead to memory corruption

N/A
CVE-2025-24225

[Apple Mail Addressing] Processing an email may lead to user interface spoofing

N/A
CVE-2025-24259

[Apple Parental Controls] An app may be able to retrieve Safari bookmarks without an entitlement check

N/A
CVE-2025-30448

[Apple iCloud Document Sharing] An attacker may be able to turn on sharing of an iCloud folder without authentication

N/A
CVE-2025-31196

[Apple CoreGraphics] Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memo…

N/A
CVE-2025-31206

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

N/A
CVE-2025-31208

[Apple CoreAudio] Parsing a file may lead to an unexpected app termination

N/A
CVE-2025-31209

[Apple CoreGraphics] Parsing a file may lead to disclosure of user information

N/A
CVE-2025-31210

[Apple FaceTime] Processing web content may lead to a denial-of-service

N/A
CVE-2025-31213

[Apple Security] An app may be able to access associated usernames and websites in a user's iCloud Keychain

N/A
CVE-2025-31215

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected process crash

N/A
CVE-2025-31216

[Apple Wi-Fi] An attacker with physical access to a device may be able to override managed Wi-Fi profiles

N/A
CVE-2025-31217

[Apple WebKit] Processing maliciously crafted web content may lead to an unexpected Safari crash

N/A
CVE-2025-31219

[Apple Kernel] An attacker may be able to cause unexpected system termination or corrupt kernel memory

N/A
CVE-2025-31220

[Apple Weather] A malicious app may be able to read sensitive location information

N/A
CVE-2025-31221

[Apple Security] A remote attacker may be able to leak memory

N/A
CVE-2025-31226

[Apple ImageIO] Processing a maliciously crafted image may lead to a denial-of-service

N/A
CVE-2025-31228

[Apple Notes] An attacker with physical access to a device may be able to access notes from the lock screen

N/A
CVE-2025-31233

[Apple CoreMedia] Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process…

N/A
CVE-2025-31235

[Apple Audio] An app may be able to cause unexpected system termination

N/A
CVE-2025-31239

[Apple CoreMedia] Parsing a file may lead to an unexpected app termination

N/A
CVE-2025-31241

[Apple Kernel] A remote attacker may cause an unexpected app termination

N/A
CVE-2025-31242

[Apple StoreKit] An app may be able to access sensitive user data

N/A
CVE-2025-31245

[Apple Pro Res] An app may be able to cause unexpected system termination

N/A
CVE-2025-31251

[Apple AppleJPEG] Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process…

N/A
CVE-2025-43374

[Apple Wi-Fi] An attacker in physical proximity may be able to cause an out-of-bounds read in kernel memory

N/A