Product:
tvOS, macOS, iOS, iPadOS, visionOS, watchOS
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue may allow an app to cause unexpected system termination. The issue has been fixed in several Apple operating systems including tvOS 26, macOS Sonoma 14.8, and iOS 18.7.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.5 | CVE-2025-43302 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious application that takes advantage of the out-of-bounds write issue. The app would need to be executed on a vulnerable device, which could lead to unexpected system termination. User interaction is required to install and run the malicious app.
Affected Products
- tvOS 26: Latest version with the fix for the out-of-bounds write issue.
- macOS Sonoma 14.8: Updated to address the vulnerability.
- macOS Sequoia 15.7: Includes the necessary security improvements.
- iOS 18.7: Patched to prevent exploitation of the issue.
- iPadOS 18.7: Updated to mitigate the vulnerability.
- visionOS 26: Fixed to enhance system stability.
- watchOS 26: Addressed the out-of-bounds write issue.
- macOS Tahoe 26: Includes the security fix.
- iOS 26: Updated to prevent potential exploitation.
- iPadOS 26: Patched to enhance security.
Mitigation
To mitigate this vulnerability, users should ensure that their devices are updated to the latest versions of the operating systems mentioned. Regularly checking for updates and applying them promptly can help protect against potential exploitation of this issue.