VULNERABILITY INTELLIGENCE
CVE-2025-30422
CVSS score6.5 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2025-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video SDK 3.6.0.126. An attacker on the local network may cause an unexpected app termination.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- product-security@apple.com — Vendor Advisory