Product:
tvOS, watchOS, iOS, iPadOS, visionOS, macOS
Summary
An out-of-bounds access issue was addressed with improved bounds checking. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory. This issue is fixed in multiple Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.2 | CVE-2025-43346 |
Exploitation
To exploit this vulnerability, an attacker must create a malicious media file and convince a user to process it on a vulnerable device. The attacker can then trigger the out-of-bounds access, potentially leading to unexpected behavior such as app crashes or memory corruption.
Affected Products
- tvOS 26: Affected by the out-of-bounds access issue.
- watchOS 26: Vulnerable to the same issue.
- iOS 18.7: Can be exploited through malicious media files.
- iPadOS 18.7: Also affected by this vulnerability.
- visionOS 26: Vulnerable to the out-of-bounds access issue.
- macOS Tahoe 26: Affected by the same issue.
- iOS 26: Vulnerable to exploitation through crafted media files.
- iPadOS 26: Also affected by the out-of-bounds access issue.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems as soon as possible. Apple has released patches that address the out-of-bounds access issue, and applying these updates will help protect against potential exploitation.