An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.7.8, macOS Ventura 13.7.8, iPadOS 17.7.10, macOS Sequoia 15.6.1, iOS 18.6.2, and iPadOS 18.6.2. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-43300 |
Exploitation
To exploit this vulnerability, an attacker could craft a malicious image file and deliver it to a targeted individual. If the victim processes this image using an affected Apple product, it may lead to memory corruption, potentially allowing the attacker to execute arbitrary code.
Affected Products
- macOS Sonoma 14.7.8 – Latest version addressing the vulnerability.
- macOS Ventura 13.7.8 – Updated to fix the issue.
- iPadOS 17.7.10 – Includes the necessary security improvements.
- macOS Sequoia 15.6.1 – Patched to prevent exploitation.
- iOS 18.6.2 – Updated to mitigate the risk.
- iPadOS 18.6.2 – Security enhancements applied.
Mitigation
Users are advised to update their devices to the latest versions of the operating systems mentioned to mitigate the risk associated with this vulnerability. Regularly applying security updates is crucial to protect against potential exploits.