Product:
iOS, iPadOS, macOS, tvOS, visionOS, watchOS
Summary
An out-of-bounds access issue was addressed with improved bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. This issue is fixed in several versions of Apple’s operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.3 | CVE-2025-43210 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious media file and deliver it to a user. If the user interacts with the file, it may trigger the out-of-bounds access, leading to unexpected behavior such as app termination or memory corruption. User interaction is required for the exploit to succeed.
Affected Products
- iOS 18.6
- iPadOS 18.6
- iPadOS 17.7.9
- macOS Sequoia 15.6
- macOS Sonoma 14.7.7
- macOS Ventura 13.7.7
- tvOS 18.6
- visionOS 2.6
- watchOS 11.6
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly applying updates can help protect against potential exploits and ensure that security improvements are in place.