Product: macOS Summary The issue was addressed with improved bounds checks. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, and macOS Tahoe 26. Processing a maliciously crafted string may lead to heap corruption. Details SeverityBase ScoreCVEMEDIUM5.5CVE-2025-43353 Exploitation To exploit this vulnerability, an attacker must have local access to the system and must craft a malicious string that, when processed by the affected macOS versions, can lead to heap corruption. This requires user interaction to trigger the processing of the malicious string, making it necessary for the attacker to convince the user to execute the crafted input. Affected Products macOS Sequoia 15.7 – Fixed the heap corruption issue with improved bounds checks.macOS Sonoma 14.8 – Addressed the vulnerability to prevent potential exploitation.macOS Tahoe 26 – Updated to mitigate the risk associated with processing malicious strings. Mitigation To mitigate this vulnerability, users should update their macOS to the latest versions provided by Apple. Regularly applying security updates and patches is essential to protect against potential exploits and ensure system integrity. References Apple Security Advisory 125110Apple Security Advisory 125111Apple Security Advisory 125112
