Apple CarPlay Vulnerability Allows Remote Code Execution to Gain Root Access

On September 10, 2025, a vulnerability in Apple's CarPlay ecosystem was disclosed, allowing remote code execution with root privileges, posing significant risks to connected vehicles. The flaw, tracked as CVE-2025-24132, affects the AirPlay protocol used by CarPlay systems. Key details include:

• Affected components: AirPlay Audio SDK (<2.7.1), AirPlay Video SDK (<3.6.0.126), and CarPlay Communication Plug-in (<R18.1).
• Attackers can exploit this vulnerability by pairing with a CarPlay device via Bluetooth and triggering a buffer overflow in the AirPlay stack, gaining high-level access without user interaction.
• Although Apple released patches in April 2025, many automotive vendors have not yet implemented these fixes, leaving millions of vehicles vulnerable.
• Organizations using CarPlay are advised to audit firmware versions and enforce update policies, while automakers are urged to prioritize the integration of patched SDKs.