This vulnerability (CVE-2025-24178) affects Apple iOS and iPadOS platforms and allows an app to break out of its sandbox, which is a security boundary designed to isolate apps from each other and the system. The issue was resolved by Apple through improved state management. The fix is included in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, and watchOS 11.4. The vulnerability has a CVSS v3.1 base score of 9.8, indicating critical severity with network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

An attacker could exploit this vulnerability to escape the app sandbox, potentially gaining unauthorized access to system resources or other apps' data. This could lead to full compromise of the affected device, including data theft, manipulation, or denial of service. The critical CVSS score reflects the high impact and ease of exploitation without user interaction or privileges.

Apple has released official fixes for this vulnerability in iOS 18.4, iPadOS 18.4, iPadOS 17.7.6, and corresponding updates for macOS, tvOS, and watchOS. Users and administrators should apply these updates promptly to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor-provided patches. Patch status is confirmed by the vendor advisory.