Listen to this Post
The CVE-2025-46287 vulnerability stems from an inconsistency in the user interface state management within the FaceTime application on macOS. This flaw occurs when the application fails to properly verify and maintain the correct state of caller identification information during the call setup process. An attacker can exploit this by sending a specially crafted FaceTime call request. The manipulation involves interfering with the sequence of events that display the caller’s identity on the recipient’s screen. Due to the improved state management, the system incorrectly trusts and displays spoofed caller ID data. The vulnerability allows the attacker to control the information shown, making the call appear to originate from a trusted contact or entity. This is achieved without requiring extensive privileges, as it targets the UI logic flaw. The issue was specific to state handling routines that did not adequately validate caller information against the actual source before rendering it on the interface. The fix involved correcting the state management logic to ensure consistent validation.
Platform: macOS
Version: Sonoma <14.8.3, Sequoia <15.7.3
Vulnerability : FaceTime Caller ID Spoofing
Severity: Medium
date: 12/12/2025
Prediction: Patch released with versions 14.8.3 & 15.7.3
What Undercode Say:
Analytics
!/bin/bash
Check if macOS version is vulnerable
CURRENT_VERSION=$(sw_vers -productVersion)
if [[ “$CURRENT_VERSION” < “14.8.3” ]] || { [[ “${CURRENT_VERSION:0:2}” == “15” ]] && [[ “$CURRENT_VERSION” < “15.7.3” ]]; }; then
echo “System might be vulnerable to CVE-2025-46287”
fi
How Exploit:
Attacker initiates a manipulated FaceTime call sequence, injecting spoofed caller ID data that the vulnerable state management logic fails to validate, causing the false ID to display.
Protection from this CVE
Update macOS to Sonoma 14.8.3, Sequoia 15.7.3 or later versions that contain the corrected state management.
Impact:
Successful exploitation allows spoofing the FaceTime caller identity, facilitating social engineering and impersonation attacks.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
