An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.8, macOS Ventura 13.7.8, iPadOS 17.7.10, macOS Sequoia 15.6.1, iOS 18.6.2, and iPadOS 18.6.2. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-43300 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious image file and deliver it to a targeted individual. If the victim processes this image using the affected Apple products, it may lead to memory corruption, potentially allowing the attacker to execute arbitrary code or gain unauthorized access to sensitive information.
Affected Products
- macOS Sonoma 14.7.8 – Latest version addressing the vulnerability.
- macOS Ventura 13.7.8 – Updated to fix the out-of-bounds write issue.
- iPadOS 17.7.10 – Includes security improvements against this vulnerability.
- macOS Sequoia 15.6.1 – Patched to prevent exploitation.
- iOS 18.6.2 – Updated to mitigate the risk of memory corruption.
- iPadOS 18.6.2 – Security update to address the vulnerability.
Mitigation
Users are advised to apply mitigations as per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.