Product:
macOS Tahoe
Summary
A type confusion issue was addressed with improved memory handling. This issue may allow an app to cause a denial-of-service. The vulnerability has been fixed in macOS Tahoe 26.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-43297 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable system. The app could leverage the type confusion issue to manipulate memory, potentially leading to a denial-of-service condition. Since the attack complexity is low and does not require user interaction, it poses a significant risk to affected systems.
Affected Products
- macOS Tahoe: The latest version addresses the type confusion issue that could lead to denial-of-service.
Mitigation
To mitigate this vulnerability, users should update to macOS Tahoe 26 or later. Regularly applying security updates and patches is essential to protect against known vulnerabilities.