Product:
tvOS, watchOS, visionOS, macOS Tahoe, iOS, iPadOS
Summary
This issue was addressed by removing the vulnerable code. An input validation issue was fixed in multiple Apple operating systems. The vulnerability had significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-43347 |
Exploitation
The vulnerability can be exploited over a network with low complexity and no user interaction required. Attackers can leverage this flaw to gain unauthorized access to sensitive information or disrupt services, leading to high availability impact.
Affected Products
- tvOS: Affected by an input validation issue that could lead to unauthorized access.
- watchOS: Vulnerable to exploitation that compromises user data and device integrity.
- visionOS: Susceptible to attacks that can affect system availability.
- macOS Tahoe: Contains the vulnerable code that can be exploited remotely.
- iOS: Affected by the same input validation issue, allowing potential data breaches.
- iPadOS: Vulnerable to similar attacks as iOS, impacting user security.
Mitigation
To mitigate this vulnerability, users should update their devices to the latest versions of the affected operating systems. Apple has released patches that remove the vulnerable code, ensuring that the systems are secure against potential exploits.