CVE-2025-31209 is an out-of-bounds read vulnerability that was addressed by improved bounds checking in several Apple operating systems. The flaw could allow parsing a crafted file to disclose user information. The issue is fixed in multiple OS versions including watchOS 11.5, macOS Sonoma 14.7.6, and others.