Apple BiometricKit Buffer Overflow Vulnerability Allowing Unexpected System Termination

Vulnerability

A buffer overflow vulnerability has been identified in the BiometricKit component of various Apple operating systems, including visionOS 2.4, macOS Ventura 13.7.5, iPadOS 18.4, iPadOS 17.7.6, and macOS Sonoma 14.7.5. This vulnerability allows an application to cause an unexpected termination of the system. The issue has been addressed with improved bounds checking.

Impact

Exploitation of this vulnerability can lead to a buffer overflow, allowing for potential arbitrary code execution or causing an application to terminate unexpectedly.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.7
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.