A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/122403 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 May 2025, 19:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/122403 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:apple:airplay_audio_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:a:apple:airplay_video_software_development_kit:*:*:*:*:*:*:*:* cpe:2.3:a:apple:carplay_communication_plug-in:*:*:*:*:*:*:*:* |
|
| First Time |
Apple carplay Communication Plug-in
Apple airplay Audio Software Development Kit Apple Apple airplay Video Software Development Kit |
|
| CWE | CWE-120 |
30 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-30 21:15
Updated : 2025-05-12 19:41
NVD link : CVE-2025-30422
Mitre link : CVE-2025-30422
JSON object : View
Products Affected
apple
- airplay_video_software_development_kit
- carplay_communication_plug-in
- airplay_audio_software_development_kit
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')