Product: macOS
Summary
This issue was addressed by removing the vulnerable code. It is fixed in macOS Sonoma 14.7.7, macOS Ventura 13.7.7, and macOS Sequoia 15.6. Running an hdiutil command may unexpectedly execute arbitrary code.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-43187 |
Exploitation
To exploit this vulnerability, an attacker with local access could run a crafted hdiutil command, which may lead to the execution of arbitrary code. This requires low privileges and no user interaction, making it a significant risk for systems where users have access to execute commands.
Affected Products
- macOS Sonoma 14.7.7 – The latest version that addresses the vulnerability.
- macOS Ventura 13.7.7 – An updated version that includes the fix.
- macOS Sequoia 15.6 – Another version that resolves the issue.
Mitigation
To mitigate this vulnerability, users should update their macOS to the latest versions: Sonoma 14.7.7, Ventura 13.7.7, or Sequoia 15.6. Regularly applying updates and patches is crucial to maintaining system security.