Product:
tvOS, macOS, iOS, iPadOS, visionOS, watchOS
Summary
An out-of-bounds write issue was addressed with improved input validation. Processing a maliciously crafted video file may lead to unexpected app termination. This issue has been fixed in several Apple operating systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 2.8 | CVE-2025-43349 |
Exploitation
To exploit this vulnerability, an attacker would need to craft a malicious video file and convince a user to open it on a vulnerable Apple device. The attacker could then potentially cause the application to terminate unexpectedly, leading to a denial of service.
Affected Products
- tvOS 26
- macOS Sonoma 14.8
- macOS Sequoia 15.7
- iOS 18.7
- iPadOS 18.7
- visionOS 26
- watchOS 26
- macOS Tahoe 26
- iOS 26
- iPadOS 26
Mitigation
Users are advised to update their devices to the latest versions of the operating systems to mitigate this vulnerability. Regularly applying security updates can help protect against potential exploits.