Product:
tvOS, watchOS, visionOS, macOS Tahoe, iOS, iPadOS
Summary
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in tvOS 26, watchOS 26, visionOS 26, macOS Tahoe 26, iOS 26 and iPadOS 26. An app may be able to cause unexpected system termination.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.3 | CVE-2025-43344 |
Exploitation
To exploit this vulnerability, an attacker would need to run a malicious application on a vulnerable device. The application could trigger the out-of-bounds access, potentially leading to unexpected behavior or system termination. Since the attack complexity is low and requires local access, it poses a risk to users who may inadvertently install compromised applications.
Affected Products
- tvOS 26: Affected by out-of-bounds access issue.
- watchOS 26: Vulnerable to unexpected system termination.
- visionOS 26: Can be exploited through malicious applications.
- macOS Tahoe 26: Susceptible to the same out-of-bounds access issue.
- iOS 26: May experience unexpected behavior due to this vulnerability.
- iPadOS 26: Affected by the out-of-bounds access issue.
Mitigation
To mitigate this vulnerability, users should ensure their devices are updated to the latest versions of tvOS, watchOS, visionOS, macOS Tahoe, iOS, and iPadOS. Regularly updating software helps protect against known vulnerabilities and reduces the risk of exploitation.